Tenda W20E Buffer Overflow Vulnerability in DHCP Rule Management

A buffer overflow vulnerability has been identified in the Tenda W20E router, specifically in version V4.0br_V15.11.0.6. The issue arises in the DHCP rule management feature, where attackers can send excessively long data through the 'addDhcpRules' parameter. The 'addDhcpRule' function processes this data without proper size validation, leading to potential buffer overflows in the 'dhcpsIndex', 'dhcpsIP', and 'dhcpsMac' variables.

Impact

Exploitation of this vulnerability can lead to arbitrary code execution or causing the device to become unresponsive.