TOTOLINK N300RH Denial-of-Service Vulnerability via HTTP POST Message Handler

A denial-of-service vulnerability has been identified in the TOTOLINK N300RH router, specifically in version 6.1c.1390_B20191101. The issue arises in the HTTP POST Message Handler, within the file '/boafrm/formFilter'. The vulnerability is triggered by manipulating the 'url' argument, leading to a resource exhaustion condition. This flaw has been publicly disclosed and is available as a proof-of-concept exploit.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the device becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/boafrm/formFilter' path, including a 'url' argument with a crafted value that exploits the lack of boundary checks. This will trigger a buffer overflow, causing a stack overflow and leading to a denial-of-service condition on the router.