UTT Aggressive 520W Buffer Overflow Vulnerability in Form User Handler

A buffer overflow vulnerability has been identified in the UTT Aggressive 520W router, specifically in the firmware version through 1.7.7-180627. The issue arises in the '/goform/formUser' endpoint, where the 'strcpy' function is used to copy the 'passwd1' parameter without proper boundary checks. This vulnerability can be exploited remotely, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing the device to crash, creating a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formUser' with the 'usernameold' and 'username' parameters set to 'admin'. Include a 'passwd1' parameter with a payload that exceeds the buffer limit, such as a long string of characters. The request must be sent with a valid Digest authorization for the 'admin' user.