Executive brief
The Totolink A3002MU is a wireless router used to provide internet connectivity in homes and small businesses. A buffer overflow vulnerability in its web management interface allows attackers to send a specially crafted HTTP request that crashes the web service, preventing access to router configuration. This denial-of-service attack requires network access to the router's management port but could potentially enable code execution.
Technical details
A buffer overflow vulnerability exists in the boa web server's formPortFw function within the Totolink A3002MU router firmware. The vulnerability stems from unsafe string-copy logic in the service_type parameter handler, which fails to enforce proper length boundaries before copying user input into a fixed-size buffer. An unauthenticated remote attacker can send a POST request to /boafrm/formPortFw with an excessively long service_type parameter to trigger the overflow, overwriting adjacent memory and crashing the boa process. The attack results in denial of service (web interface unavailability), and successful exploitation could potentially lead to arbitrary code execution. The exploit details have been publicly disclosed.
Affected products
- Totolink A3002MU Hh-B20211125.1046
Timeline
- 2026-09-14: disclosed
- other: Exploit published on GitHub (cuicuishark-sheep-fishIOT repository)