Tenda AC18 Stack Overflow Vulnerability in AdvSetMacMtuWan Function

A stack overflow vulnerability has been identified in the Tenda AC18 router, specifically in version V15.03.05.19. The issue arises in the 'AdvSetMacMtuWan' function, where the 'cloneType' parameter can be manipulated by the user. This parameter is passed to 'strcpy', creating a buffer overflow condition.

Impact

Exploitation of this vulnerability leads to a stack overflow, causing a segmentation fault on the router.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/AdvSetMacMtuWan' endpoint. Include a payload in the 'cloneType' parameter that is large enough to overflow the buffer, such as a string of repeated characters. The request should also include a cookie with the password 'vhlcvb'.