TOTOLINK A702R, A3002R, A3002RU and EX1200T Buffer Overflow Vulnerability via HTTP POST Request

A critical buffer overflow vulnerability has been identified in TOTOLINK A702R, A3002R, A3002RU, and EX1200T routers running specific firmware versions. The vulnerability arises in an unknown function of the file '/boafrm/formIPv6Addr' within the HTTP POST request handler. Manipulating the 'submit-url' argument can trigger the buffer overflow, potentially leading to a denial-of-service condition. This vulnerability can be exploited remotely, and details of the exploit are publicly available.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.

Reproduction

To reproduce this vulnerability, send a malicious HTTP POST request to the '/boafrm/formIPv6Addr' endpoint, including a crafted 'submit-url' argument that exploits the buffer overflow condition.