GL.iNet Products Buffer Overflow Vulnerability in RPC Handler

A critical buffer overflow vulnerability has been identified in multiple GL.iNet router models running firmware version 4.x. The issue arises in an unknown function within the file 'plugins.so', specifically related to the RPC handler. This vulnerability allows for memory manipulation, which could potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Remediation

Users are advised to upgrade to the latest firmware version available for their specific router model. Instructions for downloading the updated firmware can be found on the GL.iNet website or through the GL.iNet GitHub page.