CVE-2022-45715

Vulnerability

IP-COM M50 firmware V15.11.0.33(10768) contains multiple buffer overflow vulnerabilities in the formSetPortMapping function. The parameters pLanPortRange and pWanPortRange are copied via strncpy into a local stack buffer without proper bounds checking, leading to a stack-based buffer overflow [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the router's management interface with an overly long string (e.g., a sequence of 'a' characters) in either the pLanPortRange or pWanPortRange parameter. No authentication is required if the management interface is exposed; otherwise, administrative access may be needed [1].

Impact

Successful exploitation overwrites the return address on the stack, allowing the attacker to control program flow. This can result in denial of service (router crash) or arbitrary code execution with root privileges, depending on the payload [1].

Mitigation

No official patch or advisory from IP-COM has been published as of December 2022. Users should restrict access to the router's management interface to trusted networks and consider disabling remote management. If a fix becomes available, it should be applied immediately [1].