UTT HiPER 810G Buffer Overflow Vulnerability in the getOneApConfTempEntry Function

A buffer overflow vulnerability has been identified in the UTT HiPER 810G router, in firmware versions through 1.7.7-1711. The issue arises in the function 'strcpy' within the file '/goform/getOneApConfTempEntry'. This vulnerability can be exploited remotely, leading to buffer overflow attacks and potential denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/getOneApConfTempEntry' with a 'tempName' parameter that contains a payload designed to overflow the buffer. The request must include a valid Digest authorization header.