Netgear EX6150 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Netgear EX6150 wireless range extender, specifically in version 1.0.0.46_1.0.76. This vulnerability arises from improper input handling in the function sub_410090, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a GET request that includes the kernel_log header. This specific input format triggers the buffer overflow by exploiting the vulnerable strcat function, which lacks proper bounds checking.