Yu3H0

The issue is related to an out of bounds condition in the `remove rx filter` function.

A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This is due to insufficient user input validation. An attacker could exploit this by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Due to the nature of the vulnerability, only commands without parameters can be executed.

A stack buffer overflow issue exists in the `FUN 8004776c` function, located in the `/formVirtualApp` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system.

A stack buffer overflow issue was found in the `sub 80046EB4` function in the `/formSetPortTr` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system.

A stack buffer overflow issue exists in the `FUN 800462c4` function, located in the `/formAdvFirewall` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system.

The issue is related to a stack buffer overflow vulnerability in the function FUN 8004776c, located in the /formVirtualServ endpoint. This vulnerability can be triggered via a crafted POST request to the "/formVirtualServ" endpoint, allowing a remote attacker to execute arbitrary code in the system.

A stack buffer overflow issue exists in the function `FUN 80034d60` in the `/formStaticDHCP` endpoint. This issue can be triggered via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code in the system.

The issue is related to a stack buffer overflow vulnerability in the function `sub 8003183C` in the `/fromLogin` endpoint. This vulnerability can be triggered via a crafted POST request to the `/fromLogin` endpoint, potentially allowing a remote attacker to execute arbitrary code in the system.