Tenda AC6 Buffer Overflow Vulnerability in AdvSetLanip Function

A critical buffer overflow vulnerability has been identified in the Tenda AC6 router, specifically in the version 15.03.05.16 firmware. The issue arises in the AdvSetLanip file, within the fromadvsetlanip function, where the lanMask parameter can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.