Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-34195

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks.

Published

2024-08-28T20:15:07.580

Last Modified

2024-08-30T15:59:08.873

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-787
  • Type: Secondary
    CWE-121
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System totolink a3002r_firmware 1.1.1-b20200824 Yes
Hardware totolink a3002r - No
References