Description (CNA)
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Totolink / N300RT | affected 3.4.0-B20250430 |
CWE
CWE-120, CWE-119
References
- https://vuldb.com/vuln/359818
- https://vuldb.com/vuln/359818/cti
- https://vuldb.com/submit/802127
- https://github.com/xiaohaiyang-ai/TOTOLINK-N300RT-Buffer-Overflow
- https://www.totolink.net/
ADP enrichment
No English description supplied.
No references supplied.