Actiontec HTTP Server Code Execution

The vulnerability of the uhtcprecvheader function in the HTTP-server of the microprogrammed Wi-Fi extension software from Actiontec WCB6200Q involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2024-6143: Buffer Copy without Checking Size of Input

Actiontec WCB6200Q uhtcprecvheader Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specifi...