UTT HiPER 840G Buffer Overflow Vulnerability in aspRemoteApConfTempSend

A critical buffer overflow vulnerability has been identified in the UTT HiPER 840G router, specifically in versions through 3.1.1-190328. The issue arises in the file '/goform/aspRemoteApConfTempSend', where the 'remoteSrcTemp' argument can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/goform/aspRemoteApConfTempSend' endpoint, manipulating the 'remoteSrcTemp' parameter to exceed the buffer size limitations. This can be done using a variety of tools that allow for HTTP request modification, such as Burp Suite or Postman.