A buffer overflow vulnerability in the UTT Jinqi 1200GW router enables an authenticated attacker to cause a denial of service or potentially execute arbitrary code.

The vulnerability exists within the /goform/ConfigWirelessBase endpoint, where improper handling of the ssid parameter leads to a buffer overflow via an unsafe strcpy operation. This flaw requires the attacker to be authenticated to the device.

Successful exploitation of this vulnerability can result in a denial of service, rendering the router unresponsive and disrupting network connectivity for all dependent users and systems. Given the CVSS score of 8.8, this poses a significant risk to network availability and operational continuity. Unauthorized manipulation of core network infrastructure may also provide a foothold for further malicious activity within the internal environment.

Immediate Action: As the vendor has not provided a patch, immediately restrict access to the device management interface to trusted administrative IP addresses only.

Proactive Monitoring: Monitor device logs for repeated authentication attempts or unusual POST requests directed at the /goform/ConfigWirelessBase endpoint.

Compensating Controls: Implement an Access Control List (ACL) on the management interface to prevent unauthorized access and utilize a Web Application Firewall (WAF) to inspect and block malformed ssid parameters.

Public Exploit Available: Yes, a public proof-of-concept is available via the researcher write-up on GitHub.

The severity of this memory corruption vulnerability necessitates immediate defensive action, particularly as a proof-of-concept is publicly available. Organizations utilizing the UTT Jinqi 1200GW should enforce strict network segmentation and administrative access controls while awaiting a formal vendor security update.