UTT HiPER 1250GW Buffer Overflow Vulnerability in NTP Configuration

A buffer overflow vulnerability has been identified in the UTT HiPER 1250GW router, affecting firmware versions through 3.2.7-210907-180535. The issue arises in the NTP configuration form, specifically within the 'strcpy' function, where the 'Profile' parameter can be manipulated. This vulnerability allows for remote exploitation, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition on the affected device.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/goform/NTP' endpoint. The request must include a 'Profile' parameter with a value that exceeds the buffer capacity, along with 'SntpEnable' set to 'on' and a valid 'time_zone' and 'NTPServerIP'.