CVE-2024-46419

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter

Critical · published September 16, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

🚨 A buffer overflow vulnerability lurks in the TOTOLINK AC1200 T8, and it's as devastating as leaving your front door wide open! 🔥 Think of this as a delivery person trying to stuff a giant package into a mailbox that's just not built for it — it overflows, and suddenly, everything's exposed! An attacker could exploit this vulnerability by sending a specially crafted request, potentially allowing them to execute arbitrary code. This could lead to a total takeover of the router, controlling your entire network and accessing sensitive data. It's absolutely devastating!

Put simply

Think of this as a delivery person trying to stuff a giant package into a mailbox that's just not built for it — it overflows, and suddenly, everything's exposed! This buffer overflow occurs in the setWizardCfg function when handling the ssid5g parameter, allowing attackers to manipulate memory by exceeding buffer limits, leading to unexpected behavior or code execution.

What to do

An attacker could exploit this vulnerability by sending a specially crafted request, potentially allowing them to execute arbitrary code. This could lead to a total takeover of the router, controlling your entire network and accessing sensitive data. It's absolutely devastating! Update the TOTOLINK AC1200 T8 to version v4.1.5cu.861_B20230221 immediately to patch this vulnerability. Review your router's settings and disable any unnecessary features that could expose your network further. Stay vigilant and consider implementing additional security measures! You've got this! By taking these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.5th percentile
Published
2024-09-16T00:00Z
EPSS history
Timeline
  • 16 SEP 00:00Z
    TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter
    cvelistv5