TOTOLINK X15 Stack-Based Buffer Overflow Vulnerability in formMapReboot Function

A critical stack-based buffer overflow vulnerability has been identified in the TOTOLINK X15 router, specifically in version 1.0.0-B20230714.1105. The issue arises in the formMapReboot function within the file /boafrm/formMapReboot, where improper handling of the deviceMacAddr argument allows for remote exploitation. This vulnerability has been publicly disclosed, and the vendor was notified but did not respond.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the formMapReboot function, including a maliciously formatted deviceMacAddr argument. This will trigger the stack-based buffer overflow by overwriting the return address on the stack.