D-Link DIR-600L A1 Buffer Overflow Vulnerability in formDeviceReboot Function

A buffer overflow vulnerability has been identified in the D-Link DIR-600L A1 router running firmware version FW116WWb01. The issue arises in the formDeviceReboot function, where the next_page parameter is processed without proper length validation. This oversight allows for excessive input to be written into a buffer, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a request to the formDeviceReboot function with a next_page parameter that exceeds the expected length. The lack of proper input validation in this function allows the buffer overflow to occur.