Netis WF2880 Buffer Overflow Vulnerability in cgitest.cgi Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in the Netis WF2880 router, specifically in the v2.1.40207 firmware. The issue occurs in the FUN_00473154 function of the cgitest.cgi file. Attackers can exploit this vulnerability by manipulating the wl_sec_set_5g and wl_sec_rp_set_5g values in the payload. This exploitation can lead to a program crash and potentially cause a Denial-of-Service (DoS) condition.

Impact

Exploitation of this vulnerability can cause a crash of the affected program, leading to a Denial-of-Service condition.

Reproduction

The vulnerability can be reproduced by uploading a crafted payload that includes oversized values for the wl_sec_set_5g and wl_sec_rp_set_5g parameters, while also including a value for other_params. This payload can be sent through a CGI request to the router.