TOTOLINK T6 FUN_004137a4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics (TOTOLINK).A stack overflow vulnerability exists in TOTOLINK T6 version V4.1.9cu.5179_B20201015, which stems from the desc parameter in the FUN_004137a4 function not checking its length for input data. A remote attacker can exploit this vulnerability to cause a denial of service.