CVE-2024-46419

Name of the Vulnerable Software and Affected Versions TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220

Description The issue is a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter. This vulnerability occurs in the TOTOLINK AC1200 T8 router.

Recommendations For TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220, as a temporary workaround, consider disabling the setWizardCfg function until a patch is available. Restrict access to the ssid5g parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.