Submit #892958: TOTOLINK NR1800X V9.1.0u.6681_B20230703 Stack-based Buffer Overflow

Since no physical device was available during the analysis, the target binary was patched to facilitate vulnerability verification in an emulated environment.

Under normal circumstances, the vulnerable code path can only be reached after passing the authentication mechanism through a valid cookie. Therefore, the required authentication state and corresponding request parameters were simulated during testing.

Additionally, the vendor stripped the setLanguageCfg function from the released binary, which introduced additional challenges during reverse engineering and vulnerability analysis.

• Source: ⚠️ https://github.com/lxiansheng488-bit/-/blob/main/TOTOlink/ttotolink%20setLanguageCfg%20stack%20overflow.pdf
• User: Anonymous User
• Submission: 07/16/2026 15:01 (2 months ago)
• Moderation: 08/30/2026 09:46 (1 month later)
• Status: Duplicate
• VulDB entry: 210220 [TOTOLINK NR1800X 9.1.0u.6279_B20210910 setLanguageCfg lang stack-based overflow]
• Points: 0