TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.
An attacker sends a network request containing an excessively long value of the ssid5g parameter to the setWizardCfg function in the router's firmware. The function copies input data to a stack buffer without verifying its length (CWE-120 — lack of bounds checking), leading to stack overflow. This enables overwriting data that controls program execution flow and potential execution of arbitrary code.
A remote, unauthenticated attacker can trigger arbitrary code execution (RCE) on the device or cause its failure (denial of service), gaining full control over the router, including access to network configuration and traffic.
Apply patches available from the manufacturer according to references. Until an update is applied, it is recommended to restrict access to the device management interface exclusively to trusted IP addresses and isolate the device from unauthorized network traffic.
TOTOLINK A3700R with firmware version V9.1.2u.6165_20211012
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTotolink A3700r
HWTotolinkwszystkie wersjeTotolink A3700r Firmware
OSTotolink9.1.2u.6165_20211012
Related vulnerabilities
Buffer overflow w parametrze ssid funkcji setWizardCfg — TOTOLINK A3700R
Buffer overflow w TOTOLINK A3700R — parametr http_host w funkcji loginauth
Stack overflow w TOTOLINK A3700R — podatność w funkcji loginAuth
Stack overflow w TOTOLINK A3700R — funkcja setWiFiBasicCfg (ssid)
Stack overflow w TOTOLINK A3700R — funkcja setWiFiEasyCfg (parametr ssid)