Tenda O3V2 Stack-Based Buffer Overflow Vulnerability in HTTPD Component

A critical stack-based buffer overflow vulnerability has been identified in the Tenda O3V2 router, specifically in the 1.0.0.12(3880) firmware version. The issue arises in the HTTPD component, within the 'fromSysToolTime' function of the '/goform/setSysTimeInfo' file. The vulnerability can be exploited remotely by manipulating the 'Time' argument, leading to potential arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can be leveraged to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/goform/setSysTimeInfo' endpoint. The 'Time' argument must be manipulated with an input that exceeds the buffer limit, causing a stack overflow. This can be done remotely, taking advantage of the router's HTTP interface.