UTT 进取 512W Buffer Overflow Vulnerability in Remote Control Function

A buffer overflow vulnerability has been identified in the UTT 进取 512W router, specifically in the firmware version 1.7.7-171114. The vulnerability arises in the function 'strcpy' within the file '/goform/formRemoteControl'. This issue allows for remote exploitation by manipulating the 'Profile' argument, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formRemoteControl' with a 'Profile' parameter that exceeds the buffer size, effectively causing a buffer overflow. This can be done using a web browser or a tool like curl, by including the appropriate 'Authorization' header for digest authentication.