Tenda FH451 Stack-Based Buffer Overflow Vulnerability in VirtualSer Function

A critical stack-based buffer overflow vulnerability has been identified in the Tenda FH451 router, specifically in version 1.0.0.9. The issue arises in the VirtualSer form handler, where the 'page' parameter can be manipulated, leading to a stack-based overflow. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution or other unintended behavior by overwriting the return address on the stack.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/goform/VirtualSer' endpoint, manipulating the 'page' parameter to trigger the buffer overflow. The vulnerability can be exploited remotely, without authentication.