TOTOLINK T10 comment parameter buffer overflow vulnerability

TOTOLINK T10 is a wireless network system router from China’s Gion Electronics (TOTOLINK). A buffer overflow vulnerability exists in TOTOLINK T10_v2 version 5.9c.5061_B20200511, which originates from the comment parameter in the setStaticDhcpConfig of /lib/cste_modules/lan.so that fails to correctly validate the length of the input data, and can be exploited by remote attackers to execute arbitrary code on the system or cause a denial of service attack. vulnerability can be exploited by remote attackers to execute arbitrary code on the system or cause a denial of service attack.