Edimax RE11S Stack Overflow Vulnerability in formWlSiteSurvey Function

A stack overflow vulnerability has been identified in the Edimax RE11S router, specifically in version 1.11. The issue arises in the formWlSiteSurvey function, where the selSSID parameter can be manipulated to cause a buffer overflow. This vulnerability exploits a strncpy function, leading to a potential overflow of the stack.

Impact

Exploitation of this vulnerability causes a stack overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition by crashing the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the router's formWlSiteSurvey endpoint. The request must include a selSSID parameter with a value that exceeds the buffer size, such as a long string of repeated characters. This can be automated with a Python script that uses the requests library to send the crafted payload.