UTT HiPER 810G Buffer Overflow Vulnerability in formConfigDnsFilterGlobal

A buffer overflow vulnerability has been identified in the UTT HiPER 810G router, specifically in versions through 1.7.7-171114. The issue arises in the formConfigDnsFilterGlobal function, where the strcpy command is used to copy data without proper size validation. This flaw allows for remote exploitation, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /goform/formConfigDnsFilterGlobal endpoint. The request must include a 'GroupName' parameter with a value that exceeds the buffer size, bypassing the input validation. This can be done by crafting a request that takes advantage of the vulnerable strcpy function, which improperly handles the input data.