Tenda F453 Stack-Based Buffer Overflow Vulnerability in Parameters Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda F453 router, specifically in version 1.0.0.3. The issue arises in the 'fromSafeClientFilter' function within the '/goform/SafeClientFilter' file, part of the Parameters Handler component. The vulnerability is triggered by manipulating the 'menufacturer' and 'Go' arguments. When 'menufacturer' is set to 'tenda', the function improperly handles the input, leading to a buffer overflow on the stack. This vulnerability can be exploited remotely, and public proof-of-concept exploits are available.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/SafeClientFilter' with the 'menufacturer' parameter set to 'tenda' and the 'Go' parameter filled with a payload that exceeds the buffer's capacity. This can be done using a tool like Burp Suite or through a custom script that automates the process.