A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. The…

A buffer overflow vulnerability was discovered in Totolink LR350 router version 9.3.5u.6369_B20220309. The vulnerability affects the setWiFiGuestCfg function in /cgi-bin/cstecgi.cgi file through manipulation of the ssid argument. This security flaw can be exploited remotely and a public exploit is available. The vulnerability allows attackers to potentially execute arbitrary code or cause denial of service by sending specially crafted requests to the affected router's web interface. Given that this is a remotely exploitable buffer overflow with a public exploit, it poses a significant security risk to affected devices.