Tenda AX-3 Stack Overflow Vulnerability Leading to Denial-of-Service

A stack overflow vulnerability has been identified in the Tenda AX-3 router, specifically in version v16.03.12.10_CN. The issue arises in the 'fromSetWifiGusetBasic' function, where the 'shareSpeed' parameter is processed without proper length validation. This flaw allows attackers to send crafted requests that trigger the overflow, causing a denial-of-service condition by crashing the router and disrupting its normal service.

Impact

Exploitation of this vulnerability causes the router to crash, leading to a persistent denial-of-service condition where the device fails to provide normal services.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/WifiGuestSet' endpoint with a 'shareSpeed' parameter containing an excessively long string. This can be done using a script that automates the request, such as one written in Python using the 'requests' library.