Tenda W20E Buffer Overflow Vulnerability in WiFi Filter Rules Modification

A buffer overflow vulnerability has been identified in the Tenda W20E router, specifically in the version V4.0br_V15.11.0.6. The issue arises in the 'goform/formWifiFilterRulesModify' component, where attackers can manipulate the 'nptr' value. This value is then passed to the 'getMibPrefix' function and concatenated using 'sprintf' without adequate size validation, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability can result in a buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition on the device.