UTT HiPER 810G Buffer Overflow Vulnerability in Load Balancing Configuration

A critical buffer overflow vulnerability has been identified in the UTT HiPER 810G router, affecting firmware versions through 1.7.7-171114. The vulnerability arises in the '/goform/formApLbConfig' file, where the 'strcpy' function is used to copy the 'loadBalanceNameOld' parameter without proper size validation. This flaw allows for remote exploitation, leading to potential buffer overflow attacks and denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/formApLbConfig' with an excessively long 'loadBalanceNameOld' parameter. The request must include a valid Digest authorization.