UTT 进取 512W Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the UTT 进取 512W router, affecting firmware versions through 1.7.7-171114. The vulnerability arises in the '/goform/formP2PLimitConfig' endpoint, where the 'except' parameter can be manipulated to cause a buffer overflow. This issue can be exploited remotely, leading to potential denial-of-service conditions.

Impact

Exploitation of this vulnerability causes the router to crash, making services unavailable.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formP2PLimitConfig' with a crafted 'except' parameter that exceeds the buffer's capacity. This request must include authorization headers for a user with administrative privileges.