Buffer Overflow Vulnerability in TOTOLINK A3100R Router
CVE-2024-7157

8.8HIGH

Key Information:

Vendor: Totolink
Status: A3100r
Vendor: CVE Published:; 28 July 2024

Badges

👾 Exploit Exists🟡 Public PoC

Summary

The TOTOLINK A3100R router has a significant buffer overflow vulnerability rooted in the 'getSaveConfig' function of the CGI script located at /cgi-bin/cstecgi.cgi?action=save&setting. By manipulating the 'http_host' argument, an attacker can trigger a buffer overflow, potentially allowing for unauthorized access and control over the device. This vulnerability can be exploited remotely, posing a serious threat to users' network security. As the issue has been publicized, immediate action is advised to safeguard against potential attacks. Users should consider implementing network security measures and monitoring for unusual activity.

Affected Version(s)

A3100R 4.1.2cu.5050_B20200504

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-7157 - Proof of Concept