CVE-2024-34196 Information

Description

Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Overflow. The oa\ program allows attackers to modify the value of the wlan_idx\ field via ormMultiAP. This can lead to a stack overflow through the ormWlEncrypt\ CGI function by constructing malicious HTTP requests and passing a WLAN SSID value exceeding the expected length potentially resulting in command execution or denial of service attacks.

Reference

https://gist.github.com/Swind1er/1ec2fde42254598a72f1d716f9cfe2a1