TOTOLINK A702R, A3002R and A3002RU Buffer Overflow Vulnerability via HTTP POST Request

A critical buffer overflow vulnerability has been identified in TOTOLINK A702R, A3002R, and A3002RU routers running version 3.0.0-B20230809.1615. The vulnerability arises from an unknown processing issue in the file '/boafrm/formWirelessTbl' within the HTTP POST request handler. Manipulating the 'submit-url' argument can trigger the buffer overflow, potentially leading to a denial-of-service condition. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/boafrm/formWirelessTbl' endpoint, including a crafted 'submit-url' argument that exploits the buffer overflow condition.