D-Link DIR-513 Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the goform/formSetWizard1 endpoint, where the curTime parameter can be manipulated to overflow the buffer, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can lead to arbitrary code execution on the device.

Reproduction

To reproduce this vulnerability, send a POST request to the goform/formSetWizard1 endpoint. Include a curTime parameter with a payload that exceeds the buffer size, causing a stack overflow. The request should be made with a Content-Type of application/x-www-form-urlencoded.