TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg
The attacker sends a specially crafted network request to the device containing an excessively long value of the ssid parameter, passed to the setWiFiBasicCfg function. This function does not properly verify the length of input data, leading to a stack buffer overflow (stack overflow, CWE-121). Overwriting the stack allows the attacker to hijack control of the program's execution flow.
An unauthenticated attacker operating remotely over the network can lead to arbitrary code execution on the device (RCE) or its unavailability, which in practice means complete takeover of the router.
Patches available from the manufacturer should be applied according to the references. Until an update is applied, it is recommended to restrict access to the device management interface exclusively to trusted hosts and isolate the device from the public Internet.
TOTOLINK A3700R with firmware version V9.1.2u.6165_20211012
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTotolink A3700r
HWTotolinkwszystkie wersjeTotolink A3700r Firmware
OSTotolink9.1.2u.6165_20211012
Related vulnerabilities
Buffer overflow w TOTOLINK A3700R — parametr http_host w funkcji loginauth
Buffer overflow w parametrze ssid funkcji setWizardCfg — TOTOLINK A3700R
Stack overflow w TOTOLINK A3700R — funkcja setWizardCfg (ssid5g)
Stack overflow w TOTOLINK A3700R — podatność w funkcji loginAuth
Stack overflow w TOTOLINK A3700R — funkcja setWiFiEasyCfg (parametr ssid)