Mercury D196G Buffer Overflow Vulnerability in Password Parameter

A buffer overflow vulnerability has been identified in the Mercury D196G router, specifically in the firmware version d196gv1-cn-up_2020-01-09_11.21.44. The issue arises in the function sub_404CAEDC, where the 'password' parameter is handled without proper validation. This vulnerability can be exploited by sending a crafted HTTP request, leading to a device crash and causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes the device to crash, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the router's web interface. The request must include a JSON payload that exploits the buffer overflow by inserting a 'password' value that is excessively long, effectively overwriting the memory and causing the device to crash.