TOTOLINK EX1800T Stack-Based Buffer Overflow Vulnerability in setRptWizardCfg Function

A critical stack-based buffer overflow vulnerability has been identified in the TOTOLINK EX1800T wireless extender, specifically in version 9.1.0cu.2112_B20220316. The issue arises within the setRptWizardCfg function of the cgi-bin/cstecgi.cgi file, where improper handling of the loginpass argument allows for remote exploitation.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the setRptWizardCfg function in the cgi-bin/cstecgi.cgi file. The loginpass argument must be manipulated to trigger the buffer overflow.