UTT HiPER 810G Buffer Overflow Vulnerability in Mail Form Handling

A buffer overflow vulnerability has been identified in the UTT HiPER 810G router, specifically in firmware versions through 1.7.7-1711. The issue arises in the '/goform/formApMail' endpoint, where the 'strcpy' function is used to copy data without proper length validation. This flaw allows for remote exploitation, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/formApMail' endpoint. The request must include a 'senderEmail' parameter with a value that exceeds the buffer size, bypassing the length check and causing a buffer overflow.