Tenda AC5 Stack-Based Buffer Overflow Vulnerability in POST Request Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda AC5 router, specifically in the firmware version 15.03.06.47. The issue arises in the 'formQuickIndex' function within the POST request handler, where the 'PPPOEPassword' parameter can be manipulated, leading to the overflow. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/QuickIndex' with a 'PPPOEPassword' parameter. The input for this parameter can be crafted to exceed 72 bytes, which will trigger the stack-based buffer overflow.