Buffer Overflow Vulnerability in TOTOLINK A7000R

CVE-2024-7212

Summary

A significant buffer overflow vulnerability has been identified in the TOTOLINK A7000R router, specifically affecting version 9.1.0u.6268_B20220504. This vulnerability occurs in the loginauth function of the cstecgi.cgi file, where improper handling of the password argument can lead to unintended memory access and potential remote code execution. As the issue has been publicly disclosed, it poses a risk to users who may be targeted through remote attacks. Given the lack of communication from the vendor following early disclosure, users are strongly advised to review their device configurations and implement necessary security measures immediately to mitigate the threat.

References