Telesquare TLR-2005KSH Stack Overflow Vulnerability in admin.cgi Parameter

A stack overflow vulnerability has been identified in Telesquare TLR-2005KSH version 1.1.4. The issue arises in the admin.cgi parameter when the setUsernamePassword value is requested, leading to unauthorized access.

Impact

Exploitation of this vulnerability causes a stack overflow, which can potentially be leveraged for arbitrary code execution or causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a request to the admin.cgi parameter with a crafted setUsernamePassword value that exceeds the buffer limit, causing a stack overflow.