Edimax EW-7438RPn Stack-Based Buffer Overflow Vulnerability in Webs Component

A stack-based buffer overflow vulnerability has been identified in the Edimax EW-7438RPn range extender, affecting versions through 1.31. The issue arises in the webs component, specifically within the '/goform/mp' file. The vulnerability can be exploited remotely by manipulating the 'webs' argument, leading to a crash of the device. The input validation is inadequate, allowing overly long data to overwrite the stack's return address, which could potentially be leveraged to execute arbitrary code.

Impact

Exploitation of this vulnerability causes the device to crash, disrupting its normal functioning and service availability.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/mp' with a 'command' parameter that contains a long string. This excessive input will cause the router to crash, as it overwhelms the stack and disrupts the device's operation.