TOTOLINK A702R, A3002R, and A3002RU Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in TOTOLINK A702R, A3002R, and A3002RU routers running version 3.0.0-B20230809.1615. The issue arises in the HTTP POST request handler, specifically within the file '/boafrm/formSysCmd', where the 'submit-url' argument can be manipulated, leading to a buffer overflow. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.