Netgear EX6120 Buffer Overflow Vulnerability in fwAcosCgiInbound Function

A critical buffer overflow vulnerability has been identified in the Netgear EX6120 wireless range extender, specifically in version 1.0.0.68. The issue arises in the fwAcosCgiInbound function, where the 'host' argument is manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, as the input length is not properly validated before being copied, allowing for potential arbitrary code execution or causing a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the device's web interface that includes a 'host' parameter. The lack of input validation allows for a buffer overflow to occur, potentially overwriting memory and leading to arbitrary code execution.