Tenda O3V2 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Tenda O3V2 router, specifically in the firmware version 1.0.0.12(3880). The vulnerability resides in the HTTP daemon (httpd) within the 'fromNetToolGet' function of the '/goform/setPingInfo' file. This issue allows remote attackers to manipulate the 'ip' argument, leading to arbitrary code execution by overwriting the stack. The vulnerability is publicly known and has an available exploit.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could be used to execute arbitrary code on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/goform/setPingInfo' endpoint, including an overly long 'ip' argument. This will trigger the stack-based buffer overflow by exceeding the buffer's capacity and overwriting adjacent memory.