ALFA AIP-W512 Stack Overflow Vulnerability in formBTClinetSetting Function

A stack overflow vulnerability has been identified in the ALFA AIP-W512 router, specifically in version v3.2.2.2.3. The issue arises in the formBTClinetSetting function, where the torrentsindex parameter is improperly handled, allowing for authenticated exploitation.

Impact

Exploitation of this vulnerability leads to a stack overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, authenticate to the ALFA AIP-W512 router running firmware version v3.2.2.2.3. Then, send a request to the formBTClinetSetting function with a torrentsindex parameter that exceeds the expected length. This will trigger the stack overflow condition.