Tenda F456 Buffer Overflow Vulnerability in HTTPd Component

A stack-based buffer overflow vulnerability has been identified in the Tenda F456 router, specifically in version 1.0.0.5. The issue arises in the HTTPd component within the formQuickIndex function of the /goform/QuickIndex file. The vulnerability is triggered by manipulating the mit_linktype and PPPOEPassword parameters, allowing for remote exploitation. This buffer overflow can lead to a denial-of-service condition or potentially allow for remote code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can disrupt normal device operation or be leveraged for remote code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/QuickIndex endpoint. The request must include the mit_linktype parameter set to 2, along with a crafted PPPOEPassword value that exploits the buffer overflow. This can be done using a tool like Burp Suite or through a custom script that automates the process.