CVE-2024-33820

published 2024-05-01

CVE-2024-33820: Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of…

high 7.5 CVSS 3.1

AV A AC H PR N UI N S U C H I H A H

Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overflow via the formWlEncrypt function of the boa server. Specifically, they exploit the length of the wlan_ssid field triggers the overflow.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002r_firmware	—	—

CWE-120