Netis WF2880 Buffer Overflow Vulnerability in cgitest.cgi Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in the Netis WF2880 router, specifically in the v2.1.40207 firmware. The issue arises in the FUN_0046ed68 function of the cgitest.cgi file. Attackers can exploit this vulnerability by manipulating the wps_set value in the payload, leading to program crashes and potential Denial-of-Service (DoS) conditions.

Impact

Exploitation of this vulnerability causes a program crash, creating a Denial-of-Service condition.

Reproduction

The vulnerability can be reproduced by sending a payload with a crafted wps_set value, which overrides the buffer limit and causes a buffer overflow. This can be done after uploading the cgitest.cgi file to the router and executing it with QEMU.