UTT 进取 520W Buffer Overflow Vulnerability in formP2PLimitConfig

A critical buffer overflow vulnerability has been identified in the UTT 进取 520W router, specifically in the firmware version 1.7.7-180627. The vulnerability arises in the 'strcpy' function within the '/goform/formP2PLimitConfig' file. This issue allows remote attackers to manipulate the 'except' parameter, leading to a buffer overflow condition. The vulnerability has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formP2PLimitConfig' with a crafted 'except' parameter that exceeds the buffer limit. This can be done remotely, and the request must include appropriate authorization headers.