CyberRota Analysis
AI-GeneratedTOTOLINK A800R firmware version 4.1.2cu.5137_B20200730 is vulnerable to a stack-based buffer overflow in the setUrlFilterRules function of the firewall component, which can be exploited remotely through crafted URL arguments. Successful exploitation may allow an attacker to execute arbitrary code on the device, posing significant risks to network security. Organizations using this router model should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.