UTT 进取 520W Buffer Overflow Vulnerability in PPTP Client Configuration

A buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version through 1.7.7-180627. The issue arises in the 'strcpy' function within the '/goform/formPptpClientConfig' file. By manipulating the 'EncryptionMode' argument, an attacker can exploit this vulnerability remotely, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be leveraged to disrupt the normal operation of the device, potentially leading to arbitrary code execution or causing the device to become unresponsive.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formPptpClientConfig' with a crafted 'EncryptionMode' parameter. The request must include a valid Digest authorization header. This can be done using tools like curl or Postman, or by writing a script to automate the process.