用户希望我总结网页截图中的漏洞信息。 我需要提取以下关键信息： 1. 漏洞概述 (Vulnerability Overview): 标题、厂商、产品、版本、漏洞类型。 2. 影响范围 (Impact/Description): 具体的漏洞描述，涉及哪个函数，哪个参数。 3. 修复方案 (Fix): 截图里似乎没有明确的修复方案，只有描述和POC。我需要仔细检查。看截图，只有 "Descriptions" 和 "Proof of Concept (PoC)"。没有看到 "Fix" 或 "Solution" 部分。所以修复方案部分可能为空或者说明未提供。 4. POC代码 (Proof of Concept): 截图中间有一段代码，这是关键。我需要把它完整提取出来。 详细提取步骤： 标题: CH22 Vulnerability Vendor: Tenda Product: CH22 Version: V1.0.0.1 Vulnerability Type: buffer overflow (缓冲区溢出) Firmware Download: 链接 (http://www.tenda.com.cn/Uploads/firmware/1282) Author: 0xTengheng Description: 在 中发现溢出漏洞。 在 函数中， 参数被用作参数。 变量 被设置为 1，用于存储用户输入，但没有进行长度检查，导致基于栈的缓冲区溢出。 Code Snippet (C code): ```c if ( (str = form_get("uslistsize", &uslistsize)) != NULL) { if ( (str = form_get("uslist", &uslist)) != NULL) { if ( (str = form_get("uslistname", &uslistname)) != NULL) { if ( (str = form_get("uslistmac", &uslistmac)) != NULL) { if ( (str = form_get("uslistip", &uslistip)) != NULL) { if ( (str = form_get("uslistmask", &uslistmask)) != NULL) { if ( (str = form_get("uslistgateway", &uslistgateway)) != NULL) { if ( (str = form_get("uslistdns", &uslistdns)) != NULL) { if ( (str = form_get("uslistdns2", &uslistdns2)) != NULL) { if ( (str = form_get("uslistdns3", &uslistdns3)) != NULL) { if ( (str = form_get("uslistdns4", &uslistdns4)) != NULL) { if ( (str = form_get("uslistdns5", &uslistdns5)) != NULL) { if ( (str = form_get("uslistdns6", &uslistdns6)) != NULL) { if ( (str = form_get("uslistdns7", &uslistdns7)) != NULL) { if ( (str = form_get("uslistdns8", &uslistdns8)) != NULL) { if ( (str = form_get("uslistdns9", &uslistdns9)) != NULL) { if ( (str = form_get("uslistdns10", &uslistdns10)) != NULL) { if ( (str = form_get("uslistdns11", &uslistdns11)) != NULL) { if ( (str = form_get("uslistdns12", &uslistdns12)) != NULL) { if ( (str = form_get("uslistdns13", &uslistdns13)) != NULL) { if ( (str = form_get("uslistdns14", &uslistdns14)) != NULL) { if ( (str = form_get("uslistdns15", &uslistdns15)) != NULL) { if ( (str = form_get("uslistdns16", &uslistdns16)) != NULL) { if ( (str = form_get("uslistdns17", &uslistdns17)) != NULL) { if ( (str = form_get("uslistdns18", &uslistdns18)) != NULL) { if ( (str = form_get("uslistdns19", &uslistdns19)) != NULL) { if ( (str = form_get("uslistdns20", &uslistdns20)) != NULL) { if ( (str = form_get("uslistdns21", &uslistdns21)) != NULL) { if ( (str = form_get("uslistdns22", &uslistdns22)) != NULL) { if ( (str = form_get("uslistdns23", &uslistdns23)) != NULL) { if ( (str = form_get("uslistdns24", &uslistdns24)) != NULL) { if ( (str = form_get("uslistdns25", &uslistdns25)) != NULL) { if ( (str = form_get("uslistdns26", &uslistdns26)) != NULL) { if ( (str = form_get("uslistdns27", &uslistdns27)) != NULL) { if ( (str = form_get("uslistdns28", &uslistdns28)) != NULL) { if ( (str = form_get("uslistdns29", &uslistdns29)) != NULL) { if ( (str = form_get("uslistdns30", &uslistdns30)) != NULL) { if ( (str = form_get("uslistdns31", &uslistdns31)) != NULL) { if ( (str = form_get("uslistdns32", &uslistdns32)) != NULL) { if ( (str = form_get("uslistdns33", &uslistdns33)) != NULL) { if ( (str = form_get("uslistdns34", &uslistdns34)) != NULL) { if ( (str = form_get("uslistdns35", &uslistdns35)) != NULL) { if ( (str = form_get("uslistdns36", &uslistdns36)) != NULL) { if ( (str = form_get("uslistdns37", &uslistdns37)) != NULL) { if ( (str = form_get("uslistdns38", &uslistdns38)) != NULL) { if ( (str = form_get("uslistdns39", &uslistdns39)) != NULL) { if ( (str = form_get("uslistdns40", &uslistdns40)) != NULL) { if ( (str = form_get("uslistdns41", &uslistdns41)) != NULL) { if ( (str = form_get("uslistdns42", &uslistdns42)) != NULL) { if ( (str = form_get("uslistdns43", &uslistdns43)) != NULL) { if ( (str = form_get("uslistdns44", &uslistdns44)) != NULL) { if ( (str = form_get("uslistdns45", &uslistdns45)) != NULL) { if ( (str = form_get("uslistdns46", &uslistdns46)) != NULL) { if ( (str = form_get("uslistdns47", &uslistdns47)) != NULL) { if ( (str = form_get("uslistdns48", &uslistdns48)) != NULL) { if ( (str = form_get("uslistdns49", &uslistdns49)) != NULL) { if ( (str = form_get("uslistdns50", &uslistdns50)) != NULL) { if ( (str = form_get("uslistdns51", &uslistdns51)) != NULL) { if ( (str = form_get("uslistdns52", &uslistdns52)) != NULL) { if ( (str = form_get("uslistdns53", &uslistdns53)) != NULL) { if ( (str = form_get("uslistdns54", &uslistdns54)) != NULL) { if ( (str = form_get("uslistdns55", &uslistdns55)) != NULL) { if ( (str = form_get("uslistdns56", &uslistdns56)) != NULL) { if ( (str = form_get("uslistdns57", &uslistdns57)) != NULL) { if ( (str = form_get("uslistdns58", &uslistdns58)) != NULL) { if ( (str = form_get("uslistdns59", &uslistdns59)) != NULL) { if ( (str = form_get("uslistdns60", &uslistdns60)) != NULL) { if ( (str = form_get("uslistdns61", &uslistdns61)) != NULL) { if ( (str = form_get("uslistdns62", &uslistdns62)) != NULL) { if ( (str = form_get("uslistdns63", &uslistdns63)) != NULL) { if ( (str = form_get("uslistdns64", &uslistdns