Totolink N300RH Buffer Overflow Vulnerability in loginauth Parameter Handler

A buffer overflow vulnerability has been identified in the Totolink N300RH router, specifically in version 3.2.4-B20220812. The issue arises in the loginauth function within the file /cgi-bin/cstecgi.cgi, where improper handling of the Password argument creates the potential for a buffer overflow. This vulnerability can be exploited remotely, and public exploits are available.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.