TOTOLINK T10 Buffer Overflow Vulnerability in WiFi Repeater Configuration

A critical buffer overflow vulnerability has been identified in the TOTOLINK T10 router, specifically in the firmware version 4.1.8cu.5207. The issue arises in the 'setWiFiRepeaterCfg' function within the file '/cgi-bin/cstecgi.cgi', part of the POST Request Handler component. The vulnerability is triggered by manipulating the 'Password' argument, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.