Tenda O3V2 Stack-Based Buffer Overflow Vulnerability in setNetworkService

A critical stack-based buffer overflow vulnerability has been identified in the Tenda O3V2 router, specifically in version 1.0.0.12(3880). The issue arises in the httpd component, within the setNetworkService file, where the setAutoReboot function improperly handles the week argument. This vulnerability can be exploited remotely, allowing attackers to potentially execute arbitrary code by manipulating the input to the affected function.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly be used to execute arbitrary code on the device.

Reproduction

The vulnerability can be reproduced by sending a request to the /goform/setNetworkService endpoint with a crafted week argument that exceeds the expected length. This will cause a stack-based buffer overflow, allowing for arbitrary code execution.