The vulnerability of the formIpv6Setup interface in the /bin/boa binary of the Totolink A3002R router’s microprogramming system allows a attacker to execute arbitrary code.

The vulnerability of the formIpv6Setup interface in the /bin/boa binary of the Totolink A3002R router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the processing of the pppoedns1 parameter. Exploiting this vulnerability allows a...