Tenda AC23 Buffer Overflow Vulnerability in WifiExtraSet Function

A buffer overflow vulnerability has been identified in the Tenda AC23 router, specifically in the firmware version 16.03.07.52. The issue arises in the WifiExtraSet function, where insufficient boundary checks allow for the wpapsk_crypto parameter to be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, causing a denial-of-service condition on the device.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to become unresponsive or to malfunction.

Reproduction

The vulnerability can be reproduced by sending a crafted HTTP POST request to the '/goform/WifiExtraSet' endpoint. The request must include a specially crafted value for the 'wpapsk_crypto' parameter, which triggers the buffer overflow. This can be done using a variety of tools that allow for HTTP request manipulation, such as Postman or curl.