CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg

Critical · published December 11, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability in TOTOLink A7000R could let attackers crash your router like a runaway car in a parking lot! Think of it like an overstuffed suitcase that just can't hold any more clothes — eventually, something's going to pop! In this case, the router struggles to handle too much data, leading to a potentially catastrophic failure. An attacker could exploit this vulnerability to crash your router, disrupting your entire network. This could lead to unauthorized access or even allow them to control connected devices. The consequences could be absolutely devastating for your home or business network!

Put simply

Think of it like an overstuffed suitcase that just can't hold any more clothes — eventually, something's going to pop! In this case, the router struggles to handle too much data, leading to a potentially catastrophic failure. The vulnerability in question occurs via the setOpModeCfg function, allowing an attacker to trigger a stack overflow, which could lead to arbitrary code execution or denial-of-service conditions.

What to do

An attacker could exploit this vulnerability to crash your router, disrupting your entire network. This could lead to unauthorized access or even allow them to control connected devices. The consequences could be absolutely devastating for your home or business network! Immediate action is essential! Update your TOTOLink A7000R to version V9.1.0u.6115_B20201022 or later, and consider disabling any unnecessary remote access features to reduce your risk. Don't wait! You've got this! Follow these steps to secure your network and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Published
2023-12-11T00:00Z
EPSS history
Timeline
  • 11 DEC 00:00Z
    TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg
    cvelistv5