Executive brief
The Totolink A3002MU wireless router contains a buffer overflow vulnerability in its web administration interface. A remote attacker can send a malicious HTTP request to the /boafrm/formWlWds endpoint to crash the router's web server, causing denial of service. The vulnerability could potentially lead to arbitrary code execution, allowing an attacker to take complete control of the device and the network it protects.
Technical details
A buffer overflow exists in the formWlWds function of the Totolink A3002MU's web server (/bin/boa) due to unsafe handling of the submit-url parameter. The vulnerable code copies user-controlled input into a fixed-size buffer without proper length validation. An attacker can send a POST request with an excessively long submit-url value to overflow the buffer, causing memory corruption and crashing the web server process (DoS), with potential for code execution.
Affected products
- Totolink A3002MU Hh-B20211125.1046
Timeline
- 2026-09-19: disclosed