Netgear JWNR2000v2 Buffer Overflow Vulnerability in get_cur_lang_ver Function

A critical buffer overflow vulnerability has been identified in the Netgear JWNR2000v2 router, specifically in version 1.0.0.11. The issue arises in the get_cur_lang_ver function, where improper handling of the 'host' argument allows for memory corruption. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the router's get_cur_lang_ver function, manipulating the 'host' argument to trigger the buffer overflow. This can be done remotely, taking advantage of the router's exposed services.