Tenda FH451 Stack-Based Buffer Overflow Vulnerability in PPTP Client Function

A critical stack-based buffer overflow vulnerability has been identified in the Tenda FH451 router, specifically in version 1.0.0.9. The issue arises in the 'fromPptpUserAdd' function within the '/goform/PPTPDClient' file, where improper handling of the 'Username' parameter allows for remote exploitation. This vulnerability has been publicly disclosed and is accompanied by a proof-of-concept exploit.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/goform/PPTPDClient' endpoint, manipulating the 'Username' parameter to exceed the buffer limit. This can be done remotely, without authentication.