CVE-2024-37632

TOTOLINK A3700R with firmware version 9.1.2u.6165_20211012 contains a stack/buffer overflow in loginAuth triggered by the password parameter. The vulnerability arises from inadequate validation of input length/size in the loginAuth function, enabling potential crashes or arbitrary code execution ...