TOTOLINK N150RT Buffer Overflow Vulnerability in Port Forwarding Function

A critical buffer overflow vulnerability has been identified in the TOTOLINK N150RT router, specifically in version 3.4.0-B20190525. The issue arises in an unknown function of the file '/boafrm/formPortFw', where improper handling of the 'service_type' argument allows for remote exploitation. This vulnerability has been publicly disclosed and is available for exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/boafrm/formPortFw' endpoint, manipulating the 'service_type' argument to trigger the buffer overflow.