Netis WF2880 Buffer Overflow Vulnerability in cgitest.cgi Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in the Netis WF2880 router, specifically in the v2.1.40207 firmware. The issue occurs in the FUN_00471994 function of the cgitest.cgi file. Attackers can exploit this vulnerability by manipulating the wl_base_set value in the payload, potentially causing the device to crash and leading to a Denial-of-Service (DoS) condition.

Impact

Exploitation of this vulnerability causes a crash of the affected program, leading to a Denial-of-Service condition.

Reproduction

The vulnerability can be reproduced by sending a payload with a crafted wl_base_set value to the cgitest.cgi script on a Netis WF2880 router running firmware v2.1.40207. This can be done by using QEMU to emulate the router's environment, after extracting the firmware with binwalk.