Netgear EX6100 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Netgear EX6100 wireless range extender, specifically in version 1.0.2.28_1.1.138. This vulnerability arises from improper input handling in the function sub_415EF8, where the strcat function is used without sufficient bounds checking. The issue can be exploited remotely, during the parsing of a user's GET request that includes the 'GET kernel_log' header.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

To reproduce this vulnerability, send a GET request to the Netgear EX6100 that includes the 'GET kernel_log' header. The device's firmware version must be 1.0.2.28_1.1.138.