Tenda A18 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in the Tenda A18 router running version 15.13.07.13. This vulnerability affects the 'parse_macfilter_rule' function within the '/goform/setBlackRule' interface. The issue arises from inadequate validation of the 'deviceList' parameter, allowing remote attackers to manipulate the input and cause a buffer overflow. This vulnerability could lead to a denial-of-service condition or potentially allow for arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.