UTT 进取 520W Buffer Overflow Vulnerability in formTimeGroupConfig

A buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version 1.7.7-180627. The issue arises in the function 'strcpy' within the file '/goform/formTimeGroupConfig'. The vulnerability can be exploited remotely by manipulating the 'year1' parameter, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can be leveraged to disrupt the normal operation of the device, potentially leading to arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formTimeGroupConfig' with the 'year1' parameter containing a payload that exceeds the buffer's capacity. This can be done by including a large amount of data, such as 1,822 bytes, which the vulnerable function 'strcpy' will copy without proper size validation, causing a buffer overflow.