Netgear XR300 Stack-Based Buffer Overflow Vulnerability in HTTPD Service

A stack-based buffer overflow vulnerability has been identified in the Netgear XR300 router, specifically in version 1.0.3.38_10.3.30. The issue arises in the HTTPD service, through the usb_device.cgi endpoint, when processing POST requests that include the usb_folder parameter. This vulnerability could potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.