Description

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks.

INFO

Published Date :

2024-08-28T00:00:00.000Z

Last Modified :

2024-08-28T20:04:26.789Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-34195 vulnerability.

Vendors Products
Totolink
  • A3002r
  • A3002r Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-34195.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact