D-Link DIR-600L Ax Buffer Overflow Vulnerability in WAN Wizard Function

A buffer overflow vulnerability has been identified in the D-Link DIR-600L Ax router, specifically in firmware version FW116WWb01. The issue arises in the function 'formSetWAN_Wizard52', where the 'curTime' parameter is processed without proper length validation. This oversight allows for excessive input to be written into a buffer, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the 'formSetWAN_Wizard52' function, including a 'curTime' parameter with excessive length. The lack of input validation in this parameter allows for the buffer overflow to occur, as the 'curTime' value is copied into a buffer using 'sprintf' without any length checks.