Tenda CH22 Buffer Overflow Vulnerability in editFileName Function

A buffer overflow vulnerability has been identified in the Tenda CH22 router, specifically in version 1.0.0.1. The issue arises in the function formeditFileName within the file /goform/editFileName. This vulnerability allows for remote exploitation, where an attacker can manipulate the input to cause a buffer overflow, potentially leading to arbitrary code execution or causing the device to crash and become unresponsive.

Impact

Exploitation of this vulnerability causes a stack overflow, disrupting the normal operation of the router and making it inaccessible.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/editFileName endpoint with an oversized payload in the editNameMit parameter. This can be done using a Python script that automates the process, demonstrating the vulnerability by causing the router to crash.