UTT 进取 512W Buffer Overflow Vulnerability in formConfigNoticeConfig

A buffer overflow vulnerability has been identified in the UTT 进取 512W router, specifically in versions through 1.7.7-171114. The issue arises in the function 'strcpy' within the file '/goform/formConfigNoticeConfig'. The vulnerability is triggered by manipulating the 'timestart' argument, leading to a buffer overflow. This flaw can be exploited remotely, causing potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash, creating a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formConfigNoticeConfig' with a 'timestart' parameter. The value of 'timestart' should be crafted to exceed the buffer limit, causing a buffer overflow. Include the necessary Digest authorization headers as part of the request.