A critical buffer overflow vulnerability in TOTOLINK A702R routers allows remote attackers to cause memory corruption and potential system failure.

The vulnerability is a buffer overflow (CWE-120) located in the /boafrm/formParentControl endpoint. An authenticated user can trigger memory corruption by sending a specially crafted HTTP POST request containing an excessively long string in the submit-url argument, which lacks proper bounds checking.

Successful exploitation of this flaw can lead to a denial of service, rendering the network device unresponsive and potentially disrupting business operations that rely on the router for connectivity. Given the CVSS score of 8.8, this vulnerability represents a high risk to network infrastructure. Although the vector requires low privileges, the ability to remotely trigger memory corruption poses a significant threat to internal network stability.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the web management interface of the A702R to trusted management networks only to prevent unauthorized access.

Proactive Monitoring: Monitor device logs for frequent crashes or unexpected reboots, and inspect incoming traffic to the /boafrm/formParentControl endpoint for unusually long HTTP POST parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) with rules configured to block POST requests containing oversized strings in the submit-url field.

Public Exploit Available: Yes, a proof-of-concept is available via the researcher's published write-up on GitHub.

Due to the severity of this memory corruption flaw and the availability of public proof-of-concept code, it is imperative that administrators take immediate steps to isolate affected devices. If firmware updates are not provided by the vendor, consider replacing the hardware or implementing strict network segmentation to minimize exposure to potential attackers.