Liuyijun

**Name of the Vulnerable Software and Affected Versions** TOTOLINK N150RT (NTR150) version V3.4.0-B20201030 **Description** A stack-based buffer overflow occurs in the web management interface. This issue is reachable via the '/boafrm/formFilter' endpoint, which handles access-control and URL filter configurations. The flaw is triggered by the `url` request parameter when the `addFilterUrl` or `addFilterUrlFlag` action flags are set. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than it can hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `url` parameter in the '/boafrm/formFilter' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK N150RT (NTR150) version V3.4.0-B20201030 **Description** A stack-based buffer overflow occurs in the web management interface. This issue is triggered via the '/boafrm/formAjaxSet' endpoint when using the `topicurl=setting/setWiFiRepeaterConfig` branch and the `ApCliWEPKey` field. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `ApCliWEPKey` field in the '/boafrm/formAjaxSet' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK N150RT (NTR150) version V3.4.0-B20201030 **Description** A stack-based buffer overflow occurs in the web management interface when processing the rule-addition flow. The issue is located in the `sub 4156B0()` function and is reachable via the '/boafrm/formPortFw' endpoint. It is triggered by the `ip subnet` and `fw ip` request parameters. A remote attacker could exploit this to cause a denial of service or execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.