Buffer Overflow Vulnerability in Cisco CVR100W Wireless-N VPN Router

CVE-2017-3882

Summary

A vulnerability exists in the Universal Plug-and-Play (UPnP) implementation of Cisco's CVR100W Wireless-N VPN Router that enables an attacker, adjacent to the local network, to exploit this weakness. By sending specially crafted requests to the router's UPnP listening port, an attacker may trigger a buffer overflow, which can lead to unauthorized execution of arbitrary code or a denial of service condition. The security flaw is attributed to inadequate range checks for input data within the UPnP protocol. This vulnerability is applicable to all firmware releases of the Cisco CVR100W prior to 1.0.1.22, thereby exposing impacted devices to significant risks.

References