提交 #673721: TOTOLINK A3300R V17.0.0cu.557_B20221024 Buffer Overflow信息

标题TOTOLINK A3300R V17.0.0cu.557_B20221024 Buffer Overflow
描述The setDdnsCfg endpoint accepts a POST parameter provider and calls Uci_Set_Str(19, "wan", "provider", v4) without enforcing a maximum length.
来源⚠️ https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setDdnsCfg.md
用户
 yhryhryhr_miemie (UID 65492)
提交2025-10-12 09時13分 (12 月前)
管理2025-10-25 19時12分 (13 days later)
状态已接受
VulDB条目329909 [TOTOLINK A3300R 17.0.0cu.557_B20221024 /cgi-bin/cstecgi.cgi setDdnsCfg 内存损坏]
积分16

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!