TOTOLINK A3002R Buffer Overflow Vulnerability in DHCPv6s Interface

A buffer overflow vulnerability has been identified in the TOTOLINK A3002R router, specifically in version 4.0.0-B20230531.1404. The issue arises in the formDhcpv6s interface, where the addrPoolStart parameter is improperly handled, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing a denial-of-service condition by crashing the device.