Sunnyyang

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A buffer overflow occurs in the `formWlWds()` function within the `/boafrm/formWlWds` file. This issue is triggered by the manipulation of the `submit-url` argument, allowing a remote attacker to launch an attack. **Recommendations** Update Totolink A3002MU version Hh-B20211125.1046 to a patched version. As a temporary workaround, restrict access to the `/boafrm/formWlWds` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** Remote command injection is possible due to improper handling of the `localPin` argument within the `formWsc()` function located in the `/boafrm/formWsc` file. This allows a remote attacker to execute arbitrary commands on the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `formWsc()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A remote buffer overflow occurs when manipulating the `webpage` argument within the `formSchedule()` function of the `/boafrm/formSchedule` file. A buffer overflow is a condition where a process attempts to write more data to a fixed-length block of memory than it is designed to hold. **Recommendations** As a temporary workaround, restrict access to the `/boafrm/formSchedule` endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A remote buffer overflow exists in the `formWlAc()` function within the `/boafrm/formWlAc` file. This issue occurs when the `submit-url` argument is manipulated, potentially allowing an attacker to crash the system or execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/boafrm/formWlAc` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A buffer overflow can be triggered remotely via the manipulation of the `submit-url` argument within the `formWlEncrypt()` function located in the `/boafrm/formWlEncrypt` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A remote buffer overflow exists within the boa component. The issue occurs in the `formNewSchedule()` function located in the `/boafrm/formNewSchedule` file. An attacker can trigger this by manipulating the `submit-url` argument. **Recommendations** For version Hh-B20211125.1046, check for and apply the latest vendor firmware. Remove remote administration exposure. Restrict management interfaces to trusted networks.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A remote buffer overflow exists within the boa component. The issue occurs in the `formIpv6Setup()` function located in the `/boafrm/formIpv6Setup` file when the `static ipv6` argument is manipulated. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `formIpv6Setup()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A buffer overflow can be triggered remotely within the boa component. The issue exists in the `formFilter()` function located in the `/boafrm/formFilter` file, where manipulating the `ip6addr` argument allows for the overflow to occur. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `formFilter()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Totolink A3002MU version Hh-B20211125.1046 **Description** A buffer overflow occurs in the boa component within the `formPortFw()` function of the `/boafrm/formPortFw` file. This issue is triggered by the manipulation of the `service type` argument and can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.