Silex Technology SD-330AC and AMC Manager Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in Silex Technology's SD-330AC device and AMC Manager software, both in versions prior to the latest release. This vulnerability arises from improper handling of redirect URLs, which can be exploited to execute arbitrary code on the affected device.

Impact

Exploitation of this vulnerability leads to memory corruption, allowing for the execution of unintended operations on the device.

Remediation

Users are advised to update the SD-330AC firmware to version 1.50 or later, and AMC Manager to version 5.1.0 or later. After updating, set an administrator password for the web configuration interface. Note that downgrading the firmware after this update is not possible.