CVE-2024-33820

2024-05-0100:00:00

mitre

github.com

totolink ac1200

wireless router

buffer overflow

vulnerability

formwlencrypt function

boa server

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow.

References

gist.github.com/Swind1er/ee095fbfe13f77a5b45b39a5aa82bd17