जमा करें #592264: TOTOLINK T10 V2_Firmware V2_V4.1.8cu.5207 Buffer Overflow

In the T10 V2_Firmware V2_V4.1.8cu.5207 firmware has a buffer overflow vulnerability in the setWiFiMeshName function. The v3 variable receives the device_name parameter from a POST request.

• स्रोत: ⚠️ https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiMeshName-20bdf0aa1185806eb922dbd496c4a4b4
• उपयोगकर्ता: ysnysn (UID 86181)
• सबमिशन: 07/06/2025 03:49 AM (1 वर्ष पहले)
• संयम: 09/06/2025 09:59 AM (2 days later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 311677 [TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi setWiFiMeshName device_name बफ़र ओवरफ़्लो]
• अंक: 14