| 标题 | TOTOLINK A7000R <=V9.1.0u.6115 Stack-based Buffer Overflow |
|---|
| 描述 | In the firmware binary file cstecgi.cgi, a buffer overflow vulnerability exists in the function setWiFiEasyGuestCfg. The vulnerability occurs because the program does not check the data length of the ssid5g parameter during processing, and later copies it into a fixed-size data type, resulting in a Stack Overflow. |
|---|
| 来源 | ⚠️ https://github.com/zhuchan770/vulnerability/blob/main/A7000R/setWiFiEasyGuestCfg/ToToLink%20A7000R%20setWiFiEasyGuestCfg%20338996b67c9780b89829d0ea70058788.md |
|---|
| 用户 | DLChen (UID 97003) |
|---|
| 提交 | 2026-04-04 19時10分 (6 月前) |
|---|
| 管理 | 2026-04-12 22時49分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 357056 [TOTOLINK A7000R 直到 9.1.0u.6115 /cgi-bin/cstecgi.cgi setWiFiEasyGuestCfg ssid5g 内存损坏] |
|---|
| 积分 | 19 |
|---|