UTT 进取 512W Buffer Overflow Vulnerability in AP Security Form

A buffer overflow vulnerability has been identified in the UTT 进取 512W router, affecting firmware versions through 1.7.7-171114. The vulnerability arises in the '/goform/APSecurity' endpoint, where the 'wepkey1' parameter can be manipulated to cause a buffer overflow. This issue can be exploited remotely, leading to potential arbitrary code execution or a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/APSecurity' with the 'security_mode' set to 'OPEN', 'SHARED', or 'WEPAUTO'. Include a 'wepkey1' value that exceeds the buffer size, which will trigger the buffer overflow.