Tenda TX9 Buffer Overflow Vulnerability in MAC Filter Configuration

A stack-based buffer overflow vulnerability has been identified in the Tenda TX9 router, specifically in the 'setMacFilterCfg' function of the firmware version 22.03.02.10_multi. This vulnerability allows for remote exploitation by manipulating the 'deviceList' parameter, leading to potential denial-of-service conditions or arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can overwrite the return address of the function, potentially leading to arbitrary code execution or a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/setMacFilterCfg' endpoint with a crafted 'deviceList' parameter. The parameter should be a string that exceeds 160 bytes, including a carriage return character, to exploit the buffer overflow.