Stack Overflow Vulnerability in TOTOLINK Router by TOTOLINK
CVE-2022-32051

7.5HIGH

Key Information:

Vendor
Totolink
Status
T6 Firmware
Vendor
CVE Published:
1 July 2022

Summary

A stack overflow vulnerability was identified in the TOTOLINK T6 router firmware versions, specifically in the component responsible for handling various parameters such as desc, week, sTime, and eTime. An attacker could exploit this flaw by sending specially crafted input, potentially leading to denial of service or remote code execution. This vulnerability underscores the importance of patching IoT devices to safeguard against potential exploits.

References

https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.