Silex Technology SD-330AC and AMC Manager Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in Silex Technology's SD-330AC device and AMC Manager software, both in versions prior to the latest release. This vulnerability arises from improper handling of redirect URLs, which can lead to memory corruption. Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Impact

Exploitation of this vulnerability can cause memory corruption, potentially leading to arbitrary code execution on the device.

Remediation

Users are advised to update the SD-330AC firmware to version 1.50 or later, or to update AMC Manager to version 5.1.0 or later. After updating, it is recommended to set an administrator password for the web configuration interface.