CVE-2024-22662

TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules

Critical · published January 23, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the TOTOLINK A3700R makes it possible for an attacker to crash the system with just the right input! 🔥 Think of it like overstuffing a suitcase until the zipper bursts, allowing everything inside to spill out! In this case, the data spills into dangerous territory, leading to potential system crashes or worse. An attacker could exploit this vulnerability to crash your router or even take control of it, which would be absolutely devastating for your home network. Imagine someone hijacking your device and messing with everything connected to your internet!

Put simply

Think of it like overstuffing a suitcase until the zipper bursts, allowing everything inside to spill out! In this case, the data spills into dangerous territory, leading to potential system crashes or worse. The stack overflow vulnerability occurs in the setParentalRules function, where insufficient input validation lets an attacker exceed the buffer size, causing unpredictable behavior in the system.

What to do

An attacker could exploit this vulnerability to crash your router or even take control of it, which would be absolutely devastating for your home network. Imagine someone hijacking your device and messing with everything connected to your internet! To protect yourself, update your TOTOLINK A3700R to the latest firmware version immediately. Always validate inputs for sensitive functions to prevent stack overflows in the future. You've got this! Patch that firmware and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00862 · 58.2th percentile
Published
2024-01-23T00:00Z
EPSS history
Timeline
  • 23 JAN 00:00Z
    TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
    cvelistv5