Netgear EX6200 Buffer Overflow Vulnerability in Function sub_3C03C

A critical buffer overflow vulnerability has been identified in the Netgear EX6200 wireless range extender, specifically in version 1.0.3.94. The issue arises in the function sub_3C03C, where improper handling of the 'host' argument creates a buffer overflow condition. This vulnerability can be exploited remotely, allowing attackers to potentially execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash, creating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the Netgear EX6200 range extender that includes a 'host' argument. The manipulation of this argument triggers the buffer overflow in the vulnerable function.