Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.
The attacker sends a specially crafted request containing an excessively long value of the macCloneMac parameter to the setWanConfig function of the device. The lack of proper input length validation causes a stack buffer overflow. This enables overwriting critical memory areas, leading to control over program execution flow.
An unauthorized remote attacker can execute arbitrary code (RCE) on the device without needing any credentials, and can compromise the confidentiality, integrity, and availability of the system in full scope.
Apply patches available from the manufacturer according to the references. Until an update is released, it is recommended to restrict access to the device management interface only to trusted hosts and isolate the device from unprotected network segments.
Totolink N600R in firmware version v4.3.0cu.7647_B20210106
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTotolink N600r
HWTotolinkwszystkie wersjeTotolink N600r Firmware
OSTotolink4.3.0cu.7647_b20210106
Related vulnerabilities
Command injection w TOTOLINK N600R via parametr pin (WPS)
Buffer Overflow w TOTOLINK N600R umoΕΌliwiajΔ cy zdalne wykonanie kodu
TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hostti...
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langty...