UTT 进取 520W Buffer Overflow Vulnerability in formConfigNoticeConfig

A buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version 1.7.7-180627. The issue arises in the function 'strcpy' within the file '/goform/formConfigNoticeConfig'. The vulnerability can be exploited remotely by manipulating the 'timestart' parameter, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be leveraged to disrupt the normal operation of the device, potentially leading to arbitrary code execution or causing the device to become unresponsive.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formConfigNoticeConfig' with a 'timestart' parameter that contains a payload designed to overflow the buffer. This can be done using a web browser or a tool like curl, ensuring that the request includes the necessary headers for authentication.