Submit #673722: TOTOLINK A3300R V17.0.0cu.557_B20221024 Buffer Overflowinfo

TitleTOTOLINK A3300R V17.0.0cu.557_B20221024 Buffer Overflow
DescriptionMissing input validation / insufficient sanitization and lack of length checks in Uci_Set_Str and Uci_Get_Str functions that handle host.
Source⚠️ https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setDmzCfg.md
User
 wxhwxhwxh_mie (UID 66748)
Submission10/12/2025 09:14 (6 months ago)
Moderation10/25/2025 19:12 (13 days later)
StatusAccepted
VulDB entry329910 [TOTOLINK A3300R 17.0.0cu.557_B20221024 /cgi-bin/cstecgi.cgi setDmzCfg ip buffer overflow]
Points16

Do you want to use VulDB in your project?

Use the official API to access entries easily!