Tenda O3V2 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Tenda O3V2 router, specifically in version 1.0.0.12(3880). The issue arises in the httpd component, within the formWifiBasicSet function of the /goform/setWrlBasicInfo file. The vulnerability can be exploited remotely by manipulating the extChannel argument, leading to potential arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a request to the /goform/setWrlBasicInfo endpoint with a crafted extChannel argument that exceeds the buffer limit. This will cause a stack-based buffer overflow, allowing for arbitrary code execution on the device.