## Summary
Netcore NR255-V 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of attacker-supplied MAC and ID values. A remote attacker can send crafted inputs over the network to corrupt program memory, with potential impact to confidentiality, integrity, and availability.
## Technical Details
- Vulnerability class: stack-based buffer overflow (CWE-121).
- Affected endpoint: wake_up_set.cgi.
- Root cause (as described): unbounded tokenization of MAC and ID input leading to stack buffer overflow.
- Evidence from references:
- Code path / artifact: 000000000042cc88__wake_up_set.c.
- Related script path mentioned: unpack/analysis_root/web/script/advance_setup.js.
- Attack prerequisites (from NVD/description):
- Network-reachable (AV:N).
- Low complexity (AC:L) and no user interaction (UI:N).
- Privileges required: PR:L (per CVSS vector provided).
- Exploitation technique (high level): send crafted MAC and ID values to the wake_up_set.cgi endpoint to trigger overflow and program memory corruption.
## Affected
- Product: Netcore NR255-V
- Version: NR255-V-v1.5.130703.bin
## Impact
- Confidentiality impact: high (C:H).
- Integrity impact: high (I:H).
- Availability impact: high (A:H).
- Overall severity: high (CVSS 8.8 per provided metrics).
## Mitigation
1. Patch immediately to a vendor-fixed NR255-V release (the provided references do not include a specific fixed version).
2. Restrict network access to wake_up_set.cgi (reduce exposure since the issue is network-reachable).
3. Validate and constrain MAC/ID parsing logic at the application layer (ensure tokenization is bounded), if compensating controls are required while patching.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-121