Tenda AC15 Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in the Tenda AC15 router, specifically in the version 15.03.05.19_multi. The issue arises in the HTTP POST request handler, within the function 'formsetschedled' of the file '/goform/SetLEDCf'. The vulnerability allows remote exploitation by manipulating the 'Time' argument, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/goform/SetLEDCf' endpoint. Include a 'Time' argument with a value that exceeds the expected buffer size. This will trigger the buffer overflow condition in the 'formsetschedled' function.