What’s Vulnerable › Vulnerabilities
CVE-2024-34198
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-08-28 · updated 2026-06-17
- Weakness: CWE-120
Description
TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks.
Affected products
- TOTOLINK A3002RU: 2.1.1-b20230720.1011
References
Get alerted when CVE-2024-34198 or the next vulnerability affects your stack