Tenda FH1201 Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in the Tenda FH1201 router, specifically in the 1.2.0.14 firmware version. The issue arises in the 'fromRouteStatic' function within the '/goform/fromRouteStatic' file, where the 'page' parameter of HTTP POST requests is not properly validated before being processed. This flaw allows for remote exploitation, as the vulnerability can be triggered by manipulating the 'page' argument, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/goform/fromRouteStatic' endpoint with a crafted 'page' parameter. The input should be designed to overflow the buffer, taking advantage of the lack of proper size validation.