TOTOLINK N150RT vulnerabilities

Stack-based buffer overflow in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. Reachable via /boafrm/formPortFw, triggered by ip_subnet and fw_ip parameters during rule addition.

Stack-based buffer overflow in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. Reachable via /boafrm/formAjaxSet with topicurl=setting/setWiFiRepeaterConfig and the ApCliWEPKey field.

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter (access-control / URL filter configuration handler) and is triggered by the url request parameter when the addFilterUrl (or addFilterUrlFlag) action flag is set.

Vulnerability in TOTOLINK N150RT 3.4.0-B20201030 in the system function of /boafrm/formWlSiteSurvey in the web management interface. Manipulation of the wlanif argument leads to OS command injection. Remote attack possible, exploit publicly available.