TOTOLINK N350RT v8 Parameter Buffer Overflow Vulnerability

The TOTOLINK N350RT is a small home router from China’s Gion Electronics (TOTOLINK). The TOTOLINK N350RT version 9.3.5u.6139_B20201216 suffers from a buffer overflow vulnerability that originates from the parameter v8 of the main function of the file /cgi-bin/cstecgi.cgi?action=login that fails to correctly validate the length size of the input data, which can be exploited by a remote attacker on the system to could be exploited by a remote attacker to execute arbitrary code on the system or cause a denial-of-service attack.