UTT HiPER 1200GW Stack-Based Buffer Overflow Vulnerability in formTaskEdit

A stack-based buffer overflow vulnerability has been identified in the UTT HiPER 1200GW router, affecting firmware versions through 2.5.3-170306. The vulnerability arises in the strcpy function within the file /goform/formTaskEdit, where improper boundary checks allow for buffer overflow attacks. This issue can be exploited remotely, potentially leading to denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/formTaskEdit endpoint. The request must include a 'selDateType' parameter with a value that exceeds the buffer limit, bypassing any boundary checks and causing a stack-based buffer overflow.