Authenticated Stack Overflow in TOTOLINK NR1800X

CVE-2022-41521

Summary

The TOTOLINK NR1800X model has been found vulnerable to an authenticated stack overflow, triggered through improper handling of the sPort and ePort parameters in the setIpPortFilterRules function. This flaw allows potentially malicious actors with authenticated access to exploit the vulnerability, potentially leading to unauthorized access or control over the affected device. Ensuring that devices are updated to the latest firmware and implementing security best practices is crucial to mitigate risks associated with this vulnerability.

References