Tenda FH1201 Stack-Based Buffer Overflow Vulnerability in SafeEmailFilter Function

A critical stack-based buffer overflow vulnerability has been identified in the Tenda FH1201 router, specifically in version 1.2.0.14(408). The issue arises in the SafeEmailFilter form, where the 'page' parameter can be manipulated, leading to a stack-based overflow. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/SafeEmailFilter' endpoint with a crafted 'page' parameter that exceeds the buffer limit. This will trigger the stack-based buffer overflow condition.