Tenda FH451 Stack-Based Buffer Overflow Vulnerability in PPTP User Settings

A critical stack-based buffer overflow vulnerability has been identified in the Tenda FH451 router, specifically in version 1.0.0.9. The issue arises in the 'fromPptpUserSetting' function within the '/goform/PPTPUserSetting' file. The vulnerability can be exploited remotely by manipulating the 'delno' parameter. This exploitation is made easier by the fact that the function does not require authentication.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/PPTPUserSetting' endpoint with a crafted 'delno' parameter that exceeds the buffer limit. This can be done using a variety of tools that allow for HTTP request manipulation, such as Burp Suite or Postman.