Stack-Based Buffer Overflow in TOTOLINK EX1200L Product

CVE-2024-7909

Summary

A critical vulnerability has been identified in the TOTOLINK EX1200L router, specifically within the setLanguageCfg function located in the cstecgi.cgi file. This vulnerability is classified as a stack-based buffer overflow, allowing an attacker to manipulate the langType argument. If successfully exploited, this could result in remote code execution, putting the system and connected networks at significant risk. Notably, the vulnerability has been publicly disclosed, and users are strongly advised to apply any available patches or mitigations immediately. As the vendor has not responded to notifications about this issue, proactive measures are essential for maintaining network security.

References