Totolink A800R app.so setAppEasyWizardConfig buffer overflow

A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of the argument apcliSsid results in buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)

TOTOLINK A800R 安全漏洞

TOTOLINK A800R是中国吉翁电子（TOTOLINK）公司的一款无线路由器。 TOTOLINK A800R 4.1.2cu.5137_B20200730版本存在安全漏洞，该漏洞源于对库文件/lib/cste_modules/app.so中参数apcliSsid的错误操作，可能导致缓冲区溢出。

N/A

N/A