CVE-2022-45712

Vulnerability

A stack-based buffer overflow vulnerability exists in the formAddDnsForward function of IP-COM M50 routers running firmware version V15.11.0.33(10768). The function uses strcpy to copy the user-supplied rules parameter directly into a local stack buffer without proper bounds checking, leading to overflow of the return address [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the router's web interface with an excessively long rules parameter. This overflow overwrites the return address on the stack, enabling the attacker to hijack control flow. No authentication is required if the vulnerable endpoint is exposed [1].

Impact

Successful exploitation can result in denial of service due to memory corruption or, potentially, remote code execution with elevated privileges, giving the attacker full control over the affected router [1].

Mitigation

As of the publication date (2022-12-23), no official fix has been released. Users should restrict network access to the router's management interface and monitor for firmware updates from IP-COM. If no update is provided, consider isolating the device or replacing it [1].