Totolink A7100RU HTTP POST Request main buffer overflow

CVE-2023-6906

Summary

A remote buffer overflow vulnerability exists in the Totolink A7100RU router, specifically in the HTTP POST Request Handler within the /cgi-bin/cstecgi.cgi script. This vulnerability arises when manipulating the 'flag' argument with the input 'ie8', allowing attackers to overflow the buffer, potentially leading to unauthorized access or execution of malicious code. This exploit has been publicly disclosed and attackers may leverage it to compromise affected devices. It is crucial for users to apply necessary updates and security measures to protect their networks.

References