TOTOLINK A3002R Buffer Overflow Vulnerability in IPv6 Setup Interface

A buffer overflow vulnerability has been identified in the TOTOLINK A3002R router, specifically in the firmware version V4.0.0-B20230531.1404. The issue arises from inadequate input validation of the 'static_dns1' and 'static_dns2' parameters within the formIpv6Setup interface, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes the 'boa' process to crash, indicating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/boafrm/formIpv6Setup' endpoint. The request must include a long, malicious payload in the 'static_dns1' or 'static_dns2' parameter to overflow the buffer. After the request is processed, the 'boa' process will crash, demonstrating the successful exploitation of the vulnerability.