TOTOLINK EX1800T Stack-Based Buffer Overflow Vulnerability in WiFi Extender Configuration

A critical stack-based buffer overflow vulnerability has been identified in the TOTOLINK EX1800T WiFi extender, affecting versions through 9.1.0cu.2112_B20220316. The vulnerability arises in the 'setWiFiExtenderConfig' function within the '/cgi-bin/cstecgi.cgi' file. Manipulation of the 'apcliSsid' argument allows for remote exploitation of this issue.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition on the device.

Reproduction

To reproduce this vulnerability, send a crafted request to the '/cgi-bin/cstecgi.cgi' endpoint, including a specially crafted 'apcliSsid' argument that exceeds the buffer size, causing a stack-based buffer overflow.