Buffer Overflow Vulnerability in TOTOLINK LR350 Router

CVE-2022-44258

Summary

The TOTOLINK LR350 router, specifically version 9.3.5u.6369_B20220309, suffers from a buffer overflow vulnerability due to improper handling of the 'command' parameter in the 'setTracerouteCfg' function. This flaw occurs post-authentication, allowing an authenticated user to exploit this weakness, leading to potential unauthorized access or denial of service, which could compromise the router's functionality and security.

References