| 标题 | Edimax BR-6208AC V2_1.02 Buffer Overflow |
|---|
| 描述 | A stack-based buffer overflow vulnerability exists in the IQ setup `setWAN` handler of Edimax BR-6428nC v1.16. In the PPTP configuration path, the attacker-controlled `pptpDfGateway` parameter is copied into a fixed-size stack buffer with `strcpy()` and without any length validation.
An attacker can send an oversized request value to crash the web process and may be able to achieve arbitrary code execution depending on memory layout and platform protections. |
|---|
| 来源 | ⚠️ https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pptpDfGateway-Stack-Overflow-33db5c52018a80c1835dd4fab4b6c7f2 |
|---|
| 用户 | tian (UID 93438) |
|---|
| 提交 | 2026-04-10 04時55分 (6 月前) |
|---|
| 管理 | 2026-05-02 13時05分 (22 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 360844 [Edimax BR-6208AC 直到 1.02 /goform/setWAN pptpDfGateway 内存损坏] |
|---|
| 积分 | 17 |
|---|