Lafdrew

**Name of the Vulnerable Software and Affected Versions** iptime NAS firmware version 1.5.04 **Description** A buffer overflow exists in the `upload.cgi` module due to the unsafe use of the `strcpy` function. This function copies data from the `CONTENT TYPE` HTTP header into a fixed-size stack buffer (8 bytes) without sufficient bounds checking. The issue is exploitable before authentication. **Recommendations** Update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the `upload.cgi` module to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Netgear XR300 version 1.0.3.38 10.3.30 **Description** A stack-based buffer overflow exists in the HTTPD service through the `usb device.cgi` endpoint. The issue occurs when processing POST requests containing the `read access` parameter. **Recommendations** Update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the `usb device.cgi` endpoint.

**Name of the Vulnerable Software and Affected Versions** FW-WGS-804HPT version 1.305b241111 **Description** A stack overflow issue was discovered via the `web sys infoContact post` function. **Recommendations** For FW-WGS-804HPT version 1.305b241111, as a temporary workaround, consider disabling the `web sys infoContact post` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FW-WGS-804HPT version 1.305b241111 **Description** A stack overflow issue was discovered via the `bindEditMACName` parameter in the `web acl bindEdit post` function. **Recommendations** For FW-WGS-804HPT version 1.305b241111, consider restricting access to the `web acl bindEdit post` function to minimize the risk of exploitation. Avoid using the `bindEditMACName` parameter until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.