Tenda AC23 Buffer Overflow Vulnerability in PowerSaveSet Function

A buffer overflow vulnerability has been identified in the Tenda AC23 router, specifically in the firmware version 16.03.07.52. The issue arises in the '/goform/PowerSaveSet' endpoint, where the 'time' parameter can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, and public proof-of-concept exploits are available.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a device to crash.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/PowerSaveSet' endpoint. Include the 'powerSavingEn', 'time', 'powerSaveDelay', and 'ledCloseType' parameters. The 'time' parameter should be crafted to exceed buffer limits, triggering the overflow.