Tenda FH1201 Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in the Tenda FH1201 router, specifically in version 1.2.0.14. The issue arises in the 'fromSafeUrlFilter' function within the HTTP POST Request Handler. The vulnerability is triggered by manipulating the 'page' parameter, leading to a buffer overflow condition. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/goform/fromSafeUrlFilter' endpoint. Include a crafted 'page' parameter that exceeds the buffer size limitations. This will trigger the buffer overflow condition.