CVE-2022-45719

Vulnerability

A buffer overflow vulnerability exists in the IP-COM M50 router firmware version V15.11.0.33(10768). The overflow occurs in the formPortalAuth function, where the gotoUrl parameter is copied using strcpy into a local stack buffer without bounds checking, allowing the return address to be overwritten [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the router's web interface with an excessively long gotoUrl parameter. No authentication is required if the vulnerable endpoint is exposed [1]. The attack vector is remote, requiring network access to the router's management interface.

Impact

Successful exploitation can overwrite the return address, leading to a crash (denial of service) or potentially arbitrary code execution at the privilege level of the web server (typically root) [1]. This could allow the attacker to gain full control of the device.

Mitigation

As of the publication date (2022-12-23), no official patch or firmware update has been released to fix this vulnerability. Users should restrict remote access to the router's management interface and monitor for vendor updates [1].