UTT Jinqi 1200GW Buffer Overflow Vulnerability in Load Balancing Configuration

A buffer overflow vulnerability has been identified in the UTT Jinqi 1200GW router, affecting firmware versions through 3.0.0-170831. The vulnerability arises in the function 'sub_4B48F8' within the file '/goform/formApLbConfig'. Manipulation of the 'loadBalanceNameOld' parameter can be exploited remotely, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can typically be leveraged to execute arbitrary code or cause a denial-of-service condition by crashing the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formApLbConfig' with an excessively long 'loadBalanceNameOld' parameter. The request must include a valid Digest authorization.