UTT 进取 520W Buffer Overflow Vulnerability in ConfigAdvideo

A buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version through v3v1.7.7-180627. The issue arises in the ConfigAdvideo endpoint, where the 'timestart' parameter can be manipulated, leading to a critical overflow. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/ConfigAdvideo endpoint. The request must include a 'timestart' parameter with a payload that exceeds the buffer limit, effectively causing the overflow. This can be done by using the UTT 进取 520W router's web interface, after logging in as an admin.