Ruanyi

A stack-based buffer overflow exists in the HNAP Handler component within the `htdocs/cgibin` file. The issue occurs in the `hnap main()` function and can be triggered remotely by an unauthenticated attacker on the network. Successful exploitation allows an attacker to compromise the confidentiality, integrity, and availability of the device.

A remote memory corruption issue exists in the `mini httpd` component. An unauthenticated remote attacker can trigger an out-of-bounds write—a condition where data is written beyond the boundaries of a fixed-length buffer—via the `/setup.cgi` endpoint. This occurs within the `sprintf()` function.

A stack-based buffer overflow occurs during the processing of the `/usr/sbin/upgrade flash.cgi` endpoint. This issue is triggered by the manipulation of the argument boundary and can be exploited remotely.

A stack-based buffer overflow exists in the `authenticationcgi main()` function within the `authentication.cgi` file. A remote, unauthenticated attacker can trigger this issue by manipulating the `id` and `password` arguments. This allows for remote exploitation of the device.