Tenda AC7 Buffer Overflow Vulnerability in PPTP User List Management

A critical buffer overflow vulnerability has been identified in the Tenda AC7 router, specifically in the firmware version 15.03.06.44. The issue arises in the 'formSetPPTPUserList' function within the file '/goform/setPptpUserList'. This vulnerability can be exploited remotely by manipulating the 'list' parameter, leading to unauthorized memory access and potential code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution by overwriting the memory stack.