CVE-2023-46548

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect

published October 25, 2023

CVSS
—
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in the TOTOLINK X2000R, just waiting for the right moment to strike! Think of this vulnerability like a crowded restaurant where one table keeps ordering more food than it can handle — eventually, the kitchen gets overwhelmed, and orders are delayed or botched. This stack overflow can cause the device's functionality to trip over itself, creating a chaotic situation. While there's no known exploitation yet, the potential for an attacker to crash the device or execute arbitrary code exists, leading to a complete loss of control over the router. This could disrupt your entire network, making it a potential playground for mischief.

Put simply

Think of this vulnerability like a crowded restaurant where one table keeps ordering more food than it can handle — eventually, the kitchen gets overwhelmed, and orders are delayed or botched. This stack overflow can cause the device's functionality to trip over itself, creating a chaotic situation. This vulnerability in the function `formWlanRedirect` can lead to a stack overflow, which means that by sending specially crafted input, an attacker could manipulate the stack memory, potentially causing crashes or unauthorized actions.

What to do

While there's no known exploitation yet, the potential for an attacker to crash the device or execute arbitrary code exists, leading to a complete loss of control over the router. This could disrupt your entire network, making it a potential playground for mischief. It's crucial to patch to the latest firmware version as soon as it's available. Regularly check for updates from TOTOLINK and monitor your network for any suspicious activity. Don't let this vulnerability linger on your devices! You've got this! Stay proactive and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00830 · 57.1th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect
    cvelistv5