| Titel | TOTOLINK A3002R V1.1.1-B20200824.0128 Stack-based Buffer Overflow |
|---|
| Beschreibung | We found an stack overflow vulnerability in TOTOLINK router with firmware which was released recently, allows remote attackers to crash the server.In the router's formRoute function, subnet is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the subnet to execute arbitrary code. |
|---|
| Quelle | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/totolink3/vuln_36/36.md |
|---|
| Benutzer | pjq123 (UID 86618) |
|---|
| Einreichung | 19.06.2025 17:51 (vor 1 Jahr) |
|---|
| Moderieren | 21.06.2025 08:02 (2 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 313595 [TOTOLINK A3002R 1.1.1-B20200824.0128 /boafrm/formRoute subnet Pufferüberlauf] |
|---|
| Punkte | 18 |
|---|