Tenda AC9 Stack-Based Buffer Overflow Vulnerability in POST Request Handler

A stack-based buffer overflow vulnerability has been identified in the Tenda AC9 router, specifically in version 15.03.02.13. The issue arises in the 'formQuickIndex' function within the '/goform/QuickIndex' file, part of the POST Request Handler component. The vulnerability is triggered by manipulating the 'PPPOEPassword' parameter in a POST request, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.