Threats tagged 'ghsa-59q4-38q7-24rv'

The WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) has a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries. This flaw allows unauthenticated attackers to overwrite the saved return address by sending a specially crafted POST request with a Content-Length header exceeding 512 bytes. Exploitation can lead to arbitrary code execution via return-oriented programming or return-to-libc techniques.