Newtec NTC2218, NTC2250, and NTC2299 Buffer Overflow Vulnerability Allowing Code Execution

A buffer overflow vulnerability has been identified in Newtec NTC2218, NTC2250, and NTC2299 modems running Linux on PowerPC and ARM architectures. This vulnerability, which allows local execution of code and remote code inclusion, arises from the 'swdownload' binary module's 'parse_INFO' function. The function employs an unrestricted 'sscanf' to read data from incoming network packets into a statically sized buffer, creating a stack buffer overflow. The issue affects versions 1.0.1.1 through 2.2.6.19.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.