Stack Overflow Vulnerability in TOTOLINK T6 Router
CVE-2022-32049

7.5HIGH

Key Information:

Vendor
Totolink
Status
T6 Firmware
Vendor
CVE Published:
1 July 2022

Summary

A vulnerability has been identified in the TOTOLINK T6 Router, specifically in version V4.1.9cu.5179_B20201015. The issue arises from improper handling of the url parameter within the function FUN_00418540, which can lead to a stack overflow. This vulnerability could potentially be exploited by an attacker to execute arbitrary code or perform unauthorized actions, highlighting the importance of securing network devices against such flaws.

References

https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.