D-Link DIR-513 Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the 'goform/formAdvNetwork' endpoint, where the 'curTime' parameter can be manipulated to cause the overflow.

Impact

Exploitation of this vulnerability leads to a stack buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a POST request to the 'goform/formAdvNetwork' endpoint. The request must include a 'curTime' parameter with a value that exceeds the buffer limit, such as a string of 42 characters or more. This can be done using a tool like Burp Suite or through a custom script that automates the process.