UTT HiPER 810G Buffer Overflow Vulnerability in formPolicyRouteConf

A buffer overflow vulnerability has been identified in the UTT HiPER 810G router, in versions through 1.7.7-171114. The issue arises in the formPolicyRouteConf function, where the GroupName argument can be manipulated to cause a buffer overflow. This vulnerability can be exploited remotely, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/formPolicyRouteConf endpoint. The request must include a crafted GroupName parameter that exceeds the buffer size, causing a buffer overflow. This can be done by using a long string of characters in the GroupName field, along with the required headers and authorization.