Tenda O3V2 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Tenda O3V2 router, specifically in version 1.0.0.12(3880). The issue arises in the httpd component, within the function 'fromMacFilterModify' of the file '/goform/operateMacFilter'. The vulnerability can be exploited remotely by manipulating the 'mac' argument, leading to potential arbitrary code execution.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which can be used to execute arbitrary code on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/goform/operateMacFilter' endpoint, including an overly long 'mac' argument. This will trigger the stack-based buffer overflow by exceeding the buffer's capacity and overwriting adjacent memory.