Tenda F453 Buffer Overflow Vulnerability in DHCP Management Function

A critical buffer overflow vulnerability has been identified in the Tenda F453 router, specifically in version 1.0.0.3. The issue arises in the HTTP component, within the 'fromGstDhcpSetSer' function of the '/goform/GstDhcpSetSer' file. The vulnerability is triggered by manipulating the 'dips' argument, which is not properly validated before being processed. This oversight allows for stack-based buffer overflow, potentially leading to a denial-of-service condition or arbitrary code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can disrupt normal operation or be leveraged for remote code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/GstDhcpSetSer' with a 'dips' parameter that contains a payload designed to overflow the buffer. The request must include appropriate headers to mimic a legitimate XMLHttpRequest.