TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
The vulnerability results from lack of proper validation of input data length (CWE-120, CWE-121 — stack buffer overflow). An attacker can send a specially crafted login request to the network device, where the 'password' parameter exceeds the acceptable size of the stack buffer. Stack overflow can enable overwriting of the function return address or other critical data on the stack, leading to arbitrary code execution.
An attacker without any credentials can remotely execute arbitrary code on the vulnerable device (RCE), which in practice means complete takeover of the router, ability to intercept network traffic, reconfigure the device, or use it as an entry point to the local network.
Apply patches available from the manufacturer according to the references. Until the fix is deployed, it is recommended to restrict access to the device management interface only to trusted IP addresses and disable remote access (WAN) to the administrative panel.
TOTOLINK A3700R with firmware software version V9.1.2u.6165_20211012
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTotolink A3700r
HWTotolinkwszystkie wersjeTotolink A3700r Firmware
OSTotolink9.1.2u.6165_20211012
Related vulnerabilities
Buffer overflow w TOTOLINK A3700R — parametr http_host w funkcji loginauth
Buffer overflow w parametrze ssid funkcji setWizardCfg — TOTOLINK A3700R
Stack overflow w TOTOLINK A3700R — funkcja setWizardCfg (ssid5g)
Stack overflow w TOTOLINK A3700R — funkcja setWiFiEasyCfg (parametr ssid)
Stack overflow w TOTOLINK A3700R — funkcja setWiFiBasicCfg (ssid)