Tenda W20E Buffer Overflow Vulnerability in WiFi Filter Rules Management

A buffer overflow vulnerability has been identified in the Tenda W20E router, specifically in version V4.0br_V15.11.0.6. The issue arises in the 'goform/formWifiFilterRulesAdd' component, where attackers can manipulate the 'nptr' value. This value is then passed to the 'getMibPrefix' function and concatenated using 'sprintf' without adequate size validation, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability can result in a buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition on the device.