Authenticated HTTP requests can trigger a critical heap buffer overflow in the router’s upload handler, enabling arbitrary code execution on the device.
Authenticated attackers can trigger arbitrary code execution via stack-based buffer overflows in the boa web server’s vpnPassword parameter handling on specific firmware builds.
