TOTOLINK EX1200T Buffer Overflow Vulnerability in HTTP POST Request Handler

A critical buffer overflow vulnerability has been identified in the TOTOLINK EX1200T router, specifically in the firmware version 4.1.2cu.5232_B20210713. The vulnerability arises from an unknown function in the file '/boafrm/formStats' within the HTTP POST request handler. This flaw allows for remote exploitation, where an attacker can send a malicious HTTP POST request to trigger the buffer overflow.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

The vulnerability can be reproduced by sending a crafted HTTP POST request to the '/boafrm/formStats' endpoint on the affected TOTOLINK EX1200T router. The request should include a payload that exceeds the buffer size, triggering the buffer overflow condition.