UTT 进取 520W Buffer Overflow Vulnerability in FormTaskEdit

A buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version through v3v1.7.7-180627. The issue arises in the 'strcpy' function within the '/goform/formTaskEdit' endpoint. By manipulating the 'selDateType' parameter, an attacker can cause a buffer overflow, potentially leading to a denial-of-service condition. This vulnerability can be exploited remotely, and a proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be exploited to execute arbitrary code or cause a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formTaskEdit' with a crafted 'selDateType' parameter that exceeds the buffer size. The request must include a valid Digest authorization.