TOTOLINK A702R vulnerabilities

A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_418030 function of /boafrm/formParentControl. Manipulating the submit-url argument leads to buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.

A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4466F8 function of /boafrm/formOneKeyAccessButton. Manipulating the submit-url argument results in buffer overflow. The attack can be initiated remotely and the exploit has been made public.

A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument leads to buffer overflow. The attack can be launched remotely and the exploit has been disclosed to the public.

A buffer overflow vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_419BE0 function of /boafrm/formIpQoS. Manipulating the mac argument causes buffer overflow. The attack can be initiated remotely and the exploit has been published.

A buffer overflow vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423 within the sub_4162DC function of /boafrm/formFilter. Manipulating the ip6addr argument results in buffer overflow. The attack can be launched remotely and the exploit is now public.