Tenda AC15 Buffer Overflow Vulnerability in PPTP User List HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in the Tenda AC15 router, specifically in the firmware version 15.03.05.19_multi. The issue arises in the function 'formSetPPTPUserList' within the file '/goform/setPptpUserList', which handles HTTP POST requests. The vulnerability can be exploited remotely by manipulating the argument list, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition on the affected device.