PT-2025-20394 · Totolink · Totolink Nr1800X
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
TOTOLINK NR1800X version 9.1.0u.6681 B20230703
Description
The issue is an authenticated stack overflow that occurs via the
ssid5g parameter in the setWiFiEasyGuestCfg function. This allows for potential exploitation.Recommendations
For TOTOLINK NR1800X version 9.1.0u.6681 B20230703, consider disabling the
setWiFiEasyGuestCfg function until a patch is available to prevent exploitation through the ssid5g parameter.Exploit
Fix
Memory Corruption
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Totolink Nr1800X