A critical buffer overflow vulnerability in the TOTOLINK A3002MU router exposes the device to remote denial of service attacks due to insufficient input validation.

The vulnerability is a buffer overflow (CWE-120) located in the /boafrm/formWlAc interface of the device web server. An authenticated attacker can trigger this memory corruption by sending a crafted POST request containing an excessively long value in the submit-url parameter.

The successful exploitation of this vulnerability results in a denial of service, rendering the router management interface unresponsive and potentially disrupting network connectivity for all downstream clients. Given the CVSS score of 9.9, this flaw represents a critical risk to operational continuity, as it allows for the remote disruption of core networking infrastructure.

Immediate Action: There is no known patch available at this time. Administrators should restrict access to the router management interface to trusted internal IP addresses only to prevent remote exploitation.

Proactive Monitoring: Monitor device logs and network traffic for unusual POST requests directed toward the /boafrm/formWlAc endpoint, as well as unexpected service restarts or outages of the web management interface.

Compensating Controls: Implement a Web Application Firewall or network-level access control list to filter and block malformed HTTP requests that contain excessively long parameters in the submit-url field.

Public Exploit Available: Yes, a public proof-of-concept is available via the researcher write-up published on GitHub.

Given the critical severity of this vulnerability and the availability of a public proof-of-concept, users are urged to mitigate risk immediately. Restrict management interface access to authorized personnel only and monitor for vendor firmware updates, applying them as soon as they become available to permanently resolve the underlying memory corruption flaw.