| शीर्षक | TOTOLINK X15 V1.0.0-B20230714.1105 Stack-based Buffer Overflow and Command Injection |
|---|
| विवरण | There are stack overflow and command injection vulnerabilities in the formMapReboot function. There is no good control length by setting deviceMacAdd. There is a stack overflow when strcpy is copied, and the return address can be overwritten. When v5 is copied to the v4 variable, there is no command filtering, and command execution can be achieved, so that command execution can be achieved. |
|---|
| स्रोत | ⚠️ https://github.com/Yhuanhuan01/TOTOlink/blob/main/TOTOlink-x15.md |
|---|
| उपयोगकर्ता | huan (UID 84420) |
|---|
| सबमिशन | 23/05/2025 02:46 PM (1 वर्ष पहले) |
|---|
| संयम | 03/06/2025 07:31 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310916 [TOTOLINK X15 1.0.0-B20230714.1105 /boafrm/formMapReboot deviceMacAddr अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|