TOTOLINK A702R Buffer Overflow Vulnerability in formOneKeyAccessButton Function

A buffer overflow vulnerability has been identified in the TOTOLINK A702R router, specifically in the firmware version 4.0.0-B20211108.1423. The issue arises in the function sub_4466F8 within the file /boafrm/formOneKeyAccessButton. The vulnerability can be exploited remotely by manipulating the submit-url argument, leading to a buffer overflow that may cause the device to crash.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can typically lead to arbitrary code execution or a denial-of-service condition, causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a POST request to the /boafrm/formOneKeyAccessButton endpoint. The request must include a sessionCheck parameter and a submit-url parameter with a crafted URL that exceeds the buffer size, causing a buffer overflow.