TOTOLINK Routers Buffer Overflow Vulnerability in setNoticeCfg Function

A pre-authentication buffer overflow vulnerability has been identified in several TOTOLINK router models, including the A800R, A810R, A830R, A950RG, A3000RU, and A3100R. The vulnerability arises in the setNoticeCfg function, where the IpForm parameter is improperly handled, allowing for potential exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.