TOTOLINK T10 Buffer Overflow Vulnerability in WiFi Schedule Configuration

A critical buffer overflow vulnerability has been identified in the TOTOLINK T10 router, specifically in the firmware version 4.1.8cu.5207. The issue arises in the HTTP POST request handler, within the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi. The vulnerability can be exploited remotely by manipulating the 'desc' argument, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition on the device.