UTT 进取 518G Buffer Overflow Vulnerability in formTaskEdit_ap Endpoint

A buffer overflow vulnerability has been identified in the UTT 进取 518G router, affecting firmware versions through V3v3.2.7-210919-161313. The vulnerability arises from an unknown processing issue in the file '/goform/formTaskEdit_ap', where the 'txtMin2' argument can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, leading to a denial-of-service condition or arbitrary command execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to a denial-of-service condition or arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/formTaskEdit_ap' endpoint. Include a 'txtMin2' parameter with a payload that exceeds the buffer size, such as a string of repeated characters. The request must be authenticated using Digest authorization with valid credentials.