UTT 进取 512W Buffer Overflow Vulnerability in formConfigCliForEngineerOnly

A buffer overflow vulnerability has been identified in the UTT 进取 512W router, specifically in the firmware version 1.7.7-171114. The vulnerability arises in the function 'strcpy' within the file '/goform/formConfigCliForEngineerOnly'. This issue allows remote attackers to manipulate the 'addCommand' argument, leading to a buffer overflow. The vulnerability has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formConfigCliForEngineerOnly' with a crafted 'addCommand' parameter. The request must include a valid Digest authorization. The payload should be designed to overflow the buffer, taking advantage of the lack of boundary checks in the 'strcpy' function.