CVE-2024-37634

Name of the Vulnerable Software and Affected Versions TOTOLINK A3700R version 9.1.2u.6165 20211012

Description The issue is related to a stack overflow in the setWiFiEasyCfg() function, which can be triggered via the ssid parameter. This allows a remote attacker to potentially execute arbitrary code.

Recommendations For TOTOLINK A3700R version 9.1.2u.6165 20211012, as a temporary workaround, consider disabling the setWiFiEasyCfg() function until a patch is available. Restrict access to the ssid parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.