Yuhongxiang

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical vulnerability exists in UTT HiPER 840G. The issue involves a buffer overflow in an unknown part of the file `/goform/aspApBasicConfigUrcp` due to the manipulation of the `Username` argument. This allows for remote exploitation. The exploit has been publicly disclosed. Recommendations: UTT HiPER 840G versions up to 3.1.1-190328: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical buffer overflow vulnerability exists in UTT HiPER 840G. The issue is due to the manipulation of the `remoteSrcTemp` argument within the file `/goform/aspRemoteApConfTempSend`. The attack can be launched remotely. The exploit for this issue has been publicly disclosed. The vendor was contacted but did not respond. Recommendations: Versions prior to 3.1.1-190328 should be updated. As a temporary workaround, consider restricting access to the `/goform/aspRemoteApConfTempSend` file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the TOTOLINK A3002RU. The issue affects an unknown function of the file /boafrm/formParentControl. The manipulation of the `submit-url` argument leads to a buffer overflow. This can be exploited remotely. Recommendations: For version 3.0.0-B20230809.1615, as a temporary workaround, consider restricting access to the /boafrm/formParentControl file to minimize the risk of exploitation. Avoid using the `submit-url` argument in the affected HTTP POST Request Handler until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical issue has been found in the processing of the file /goform/formPictureUrl. The manipulation of the `importpictureurl` argument leads to buffer overflow. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond. Recommendations: For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider restricting access to the /goform/formPictureUrl endpoint to minimize the risk of exploitation. Avoid using the `importpictureurl` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical vulnerability was found in the UTT HiPER 840G, affecting unknown code of the file /goform/websWhiteList. The manipulation of the `addHostFilter` argument leads to a buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Recommendations: For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the `addHostFilter` argument in the /goform/websWhiteList endpoint until a patch is available. Restrict access to the /goform/websWhiteList endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT 进取 750W versions up to 3.2.2-191225 Description: A critical vulnerability has been found in UTT 进取 750W, affecting an unknown part of the file /goform/Fast wireless conf. The manipulation of the `ssid` argument leads to a buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Recommendations: For versions up to 3.2.2-191225, as a temporary workaround, consider restricting access to the `/goform/Fast wireless conf` endpoint to minimize the risk of exploitation. Avoid using the `ssid` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical issue affects the function `sub 416928` of the file `/goform/formConfigDnsFilterGlobal` in the component API. The manipulation of the argument `GroupName` leads to buffer overflow. This issue can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. Recommendations: For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the `sub 416928` function until a patch is available. Restrict access to the `/goform/formConfigDnsFilterGlobal` API endpoint to minimize the risk of exploitation. Avoid using the `GroupName` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical issue affects the `strcpy` function of the `/goform/setSysAdm` file in the API component. The manipulation of the `passwd1` argument leads to buffer overflow, allowing remote attacks. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. Recommendations: For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the `strcpy` function in the `/goform/setSysAdm` file of the API component until a patch is available. Restrict access to the `/goform/setSysAdm` API endpoint to minimize the risk of exploitation. Avoid using the `passwd1` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical issue affects the function `sub 484E40` of the file `/goform/formP2PLimitConfig` of the component API. The manipulation of the argument `except` leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Recommendations: For UTT HiPER 840G versions up to 3.1.1-190328, as a temporary workaround, consider disabling the `sub 484E40` function until a patch is available. Restrict access to the `/goform/formP2PLimitConfig` API endpoint to minimize the risk of exploitation. Avoid using the argument `except` in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK A702R version 4.0.0-B20230721.1521 **Description** A critical vulnerability exists in the TOTOLINK A702R router, specifically within the HTTP POST Request Handler component. The issue is a buffer overflow triggered by manipulating the `submit-url` parameter in a POST request to the `/boafrm/formIpv6Setup` endpoint. This can be exploited remotely to cause a denial-of-service condition. The exploit for this vulnerability has been publicly disclosed. **Recommendations** TOTOLINK A702R version 4.0.0-B20230721.1521: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical vulnerability has been found in the HTTP POST Request Handler of the TOTOLINK EX1200T. The issue is related to an unknown function of the file /boafrm/formIpv6Setup. The manipulation of the `submit-url` argument leads to a buffer overflow. This can be exploited remotely. The exploit has been disclosed to the public. Recommendations: For TOTOLINK EX1200T version 4.1.2cu.5232 B20210713, consider disabling the HTTP POST Request Handler or restricting access to the /boafrm/formIpv6Setup file until a patch is available. Avoid using the `submit-url` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formIPv6Addr. The manipulation of the `submit-url` argument leads to a buffer overflow. This can be exploited remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider restricting access to the `/boafrm/formIPv6Addr` file until a patch is available. Avoid using the `submit-url` argument in the affected HTTP POST Request Handler until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the TOTOLINK X15, affecting the file /boafrm/formIpv6Setup. The manipulation of the `submit-url` argument leads to a buffer overflow. This issue can be initiated remotely. The exploit has been disclosed to the public and may be used. The vulnerability is related to improper restriction of operations within the bounds of a memory buffer and buffer copy without checking the size of the input, also known as a classic buffer overflow. Recommendations: For TOTOLINK X15 version 1.0.0-B20230714.1105, as a temporary workaround, consider restricting access to the /boafrm/formIpv6Setup file and the HTTP POST Request Handler component to minimize the risk of exploitation. Avoid using the `submit-url` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A problematic issue was found in the HTTP POST Message Handler component, specifically affecting an unknown part of the file /boafrm/formFilter. The manipulation of the `url` argument leads to denial of service. The exploit has been disclosed to the public and may be used. Recommendations: For TOTOLINK N300RH version 6.1c.1390 B20191101, consider restricting access to the /boafrm/formFilter file to minimize the risk of exploitation. As a temporary workaround, avoid using the `url` argument in the affected HTTP POST Message Handler until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A critical issue was found in the HTTP POST Message Handler of the TOTOLINK N300RH, affecting some unknown functionality of the file /boafrm/formPortFw. The manipulation of the `service type` argument leads to a buffer overflow. This issue can be exploited remotely. Recommendations: For TOTOLINK N300RH version 6.1c.1390 B20191101, as a temporary workaround, consider restricting access to the /boafrm/formPortFw file and the `service type` argument in the HTTP POST Message Handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.