CVE-2024-34198: totolink a3002ru_firmware Classic Buffer Overflow

Vulnerability summary

CVE-2024-34198 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in totolink a3002ru_firmware. EPSS estimates a 0.66% chance of exploitation in the next 30 days, higher than 51% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-08-2024
   PublishedVulnerability first disclosed.
2. 29-08-2024
   Last modifiedVulnerability information updated.

Description

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.