Tenda W20E Buffer Overflow Vulnerability in User Authentication Function

A buffer overflow vulnerability has been identified in the Tenda W20E router, specifically in version V4.0br_V15.11.0.6. The issue arises in the 'goform/formAddWebAuthUse' component, where the 'userInfo' value is processed by the 'addAuthUser' function. The vulnerability allows attackers to exploit the lack of size validation in 'sscanf', potentially leading to arbitrary memory manipulation.

Impact

Exploitation of this vulnerability can result in a buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition by crashing the device.