Tenda F451 Buffer Overflow Vulnerability in the HTTP Daemon

A stack-based buffer overflow vulnerability has been identified in the Tenda F451 router, specifically in version 1.0.0.7. The issue arises in the HTTP daemon within the 'fromAddressNat' function, where user-supplied data in the 'entrys' parameter is processed without proper length validation. This oversight allows for remote exploitation, potentially leading to unauthorized code execution or a denial-of-service condition.

Impact

Exploitation of this vulnerability allows for remote code execution or a denial-of-service condition on the affected device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/addressNat' endpoint with a payload that includes a crafted 'entrys' parameter. The payload should be designed to exceed the buffer's capacity, causing a stack-based overflow. This can be done using a simple script that automates the process of sending the malicious payload.