TOTOLINK T6 FUN_0041af40 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics (TOTOLINK).A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179_B20201015 version, which stems from the cloneMac parameter in the FUN_0041af40 function not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service.