D-Link DIR-600L A1 Buffer Overflow Vulnerability in formSetPortTr Function

A buffer overflow vulnerability has been identified in the D-Link DIR-600L A1 router running firmware version FW116WWb01. The issue arises in the formSetPortTr function, where the curTime parameter is processed without proper length validation. This oversight allows for excessive input to be written into a buffer, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a request to the router's formSetPortTr function with an overly long curTime parameter. The lack of length checking in the sprintf function allows the excessive input to overflow the buffer.