Edimax RE11S Stack Overflow Vulnerability in FormStaDrvSetup Function

A stack overflow vulnerability has been identified in the Edimax RE11S router, specifically in version 1.11. The issue arises in the formStaDrvSetup function, where the rootAPmac parameter can be manipulated to cause a buffer overflow. This vulnerability allows for a sprintf-based stack overflow, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack overflow, which can be used to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/formStaDrvSetup' endpoint. The request must include a 'rootAPmac' parameter with a value that exceeds the buffer size, effectively causing a stack overflow. The 'wiz_wispManu' parameter should also be included, set to '0'.