| Título | Totolink N300RT Router V3.4.0-B20250430 Buffer Overflow |
|---|
| Descripción | A stack-based buffer overflow vulnerability exists in the boa web server of the TOTOLINK N300RT router (firmware <= V3.4.0-B20250430). The vulnerability is located in the is_cmd_string_valid function within libapmib.so, which fails to validate the length of the localPin parameter in the /boafrm/formWsc endpoint. An authenticated attacker can bypass CSRF and token checks to send a crafted POST request with an oversized payload. This overflows a local buffer and overwrites the saved return address ($ra), leading to a Denial of Service (DoS) or potential Remote Code Execution (RCE). |
|---|
| Fuente | ⚠️ https://github.com/xiaohaiyang-ai/TOTOLINK-N300RT-Buffer-Overflow |
|---|
| Usuario | xyhackr (UID 96769) |
|---|
| Sumisión | 2026-04-10 16:17 (hace 6 meses) |
|---|
| Moderación | 2026-04-27 17:29 (17 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 359818 [Totolink N300RT 3.4.0-B20250430 libapmib.so /boafrm/formWsc is_cmd_string_valid localPin desbordamiento de búfer] |
|---|
| Puntos | 20 |
|---|