The vulnerability of the uh_tcp_recv_content() function in the HTTP-server of the microprogrammed Wi-Fi extension software from Actiontec WCB6200Q allows a hacker to execute arbitrary code.

The vulnerability of the uhtcprecvcontent function on the HTTP-server of the Actiontec WCB6200Q Wi-Fi extension software-related microprogramming devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operati...

CVE-2024-6142: Buffer Copy without Checking Size of Input

Actiontec WCB6200Q uhtcprecvcontent Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specif...