TOTOLINK T10 pin parameter buffer overflow vulnerability

TOTOLINK T10 is a wireless network system router from China’s Gion Electronics (TOTOLINK). A buffer overflow vulnerability exists in TOTOLINK T10_v2 version 5.9c.5061_B20200511, which stems from the pin parameter in setWiFiWpsConfig failing to correctly validate the length size of the input data, and can be exploited by a remote attacker to execute arbitrary code on a system or cause a denial of service attack.