TOTOLINK A702R, A3002R, and A3002RU Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in TOTOLINK A702R, A3002R, and A3002RU routers running version 3.0.0-B20230809.1615. The issue arises in the HTTP POST request handler, specifically within the file '/boafrm/formDMZ'. The vulnerability is triggered by manipulating the 'submit-url' argument, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.