Tenda FH451 Stack-Based Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical stack-based buffer overflow vulnerability has been identified in the Tenda FH451 router, specifically in version 1.0.0.9. The issue arises in the 'fromNatlimit' function within the '/goform/Natlimit' file, part of the HTTP POST Request Handler component. The vulnerability is triggered by manipulating the 'page' argument, leading to a stack-based overflow that can be exploited remotely. This vulnerability has been publicly disclosed and is associated with a proof-of-concept exploit.

Impact

Exploitation of this vulnerability causes a denial-of-service condition. Additionally, it can be used to create a Return-Oriented Programming (ROP) chain, allowing an attacker to overwrite the return address and potentially escalate privileges or execute remote code.