TOTOLINK A3002R Buffer Overflow Vulnerability in Web Interface Port Forwarding

A buffer overflow vulnerability has been identified in the TOTOLINK A3002R router, specifically in version 4.0.0-B20230531.1404. The issue arises in the web interface's port forwarding section, where the 'fw_ip' parameter is processed. This vulnerability allows attackers to craft input that causes a denial-of-service condition by overflowing the buffer, which can disrupt the normal operation of the device.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the device to become unresponsive or inaccessible.

Reproduction

The vulnerability can be reproduced by sending a crafted input that exceeds the buffer capacity in the 'fw_ip' parameter of the '/boafrm/formPortFw' endpoint. This can be done using a tool like Burp Suite to intercept and modify the request. Once the oversized input is sent, the device's web server will crash, making the router inaccessible.