Totolink LR350 Buffer Overflow Vulnerability in setWiFiBasicCfg Function

A buffer overflow vulnerability has been identified in the Totolink LR350 router running firmware version 9.3.5u.6369_B20220309. The issue arises in the function setWiFiBasicCfg within the file /cgi-bin/cstecgi.cgi. The vulnerability can be exploited remotely by manipulating the ssid argument, leading to a stack-based buffer overflow.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can potentially be used to execute arbitrary code or cause a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the setWiFiBasicCfg function in the /cgi-bin/cstecgi.cgi file. The request must include a specially manipulated ssid argument that exceeds the expected buffer size, causing a buffer overflow on the stack.