Tenda HG3 Stack-Based Buffer Overflow Vulnerability in IPv6 Routing Configuration

A stack-based buffer overflow vulnerability has been identified in the Tenda HG3 router operating system version 2.0. The issue arises in the 'formUploadConfig' function within the '/boaform/formIPv6Routing' file. The vulnerability is triggered by improper validation of the 'destNet' argument, allowing remote attackers to exploit the flaw. This exploitation can lead to unauthorized access to the device's internal system interfaces and cause denial-of-service conditions, disrupting the normal operation of the affected IoT device.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, allowing for potential arbitrary code execution or causing the device to crash and become unresponsive.