The vulnerability of the uh_tcp_recv_header() function in the HTTP-server of the microprogramming-based Wi-Fi extension devices from Actiontec, WCB6200Q, allows a hacker to execute arbitrary code.

The vulnerability of the uhtcprecvheader function in the HTTP-server of the microprogrammed Wi-Fi extension software from Actiontec WCB6200Q involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2024-6143: Buffer Copy without Checking Size of Input

Actiontec WCB6200Q uhtcprecvheader Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specifi...