Tenda F453 Buffer Overflow Vulnerability in SafeEmailFilter Function Allowing Remote Code Execution

A buffer overflow vulnerability has been identified in the Tenda F453 router, specifically in version 1.0.0.3. The issue arises in the httpd component, within the fromSafeEmailFilter function of the /goform/SafeEmailFilter file. The vulnerability is triggered by manipulating the 'page' argument, which is not properly validated before being processed. This oversight allows for remote exploitation, potentially leading to unauthorized code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be used to execute arbitrary code on the device, according to the vulnerability's proof-of-concept.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/SafeEmailFilter endpoint. The request must include a 'page' parameter filled with a payload that exceeds the buffer's capacity, effectively causing the overflow.