CVE-2024-34195 Memory corruption in n/a
A buffer overflow in the TOTOLINK AC1200 router's boa server allows attackers to execute arbitrary commands or cause denial of service via crafted CGI requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-34195?
CVE-2024-34195 is a high-severity memory corruption vulnerability in Totolink A3002r Firmware, published on 28 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks.
Which versions are affected by CVE-2024-34195?
It affects 1 product.
Products include Totolink A3002r Firmware.
How do I fix CVE-2024-34195?
No fix has been published for CVE-2024-34195 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-34195 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-34195 exists.
Other vulnerabilities in Totolink A3002r Firmware
Sources
Also known as GHSA-wm63-qmcq-5w39.