UTT HiPER 810G Buffer Overflow Vulnerability in formTaskEdit_ap

A buffer overflow vulnerability has been identified in the UTT HiPER 810G router, in versions through 1.7.7-1711. The issue arises in the '/goform/formTaskEdit_ap' file, where the 'strcpy' function is used to copy the 'txtMin2' argument without proper size validation. This vulnerability can be exploited remotely, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formTaskEdit_ap' with a 'txtMin2' parameter that exceeds the buffer size. This can be done using a web browser or a tool like curl, after including the necessary authentication headers.