CVE-2022-32044: High severity totolink t6 firmware vulnerability

Published Jul 1, 2022

Updated

TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN00413f80.

Affected Software

2 affected components

TOTOLINK T6 Firmware=4.1.9cu.5179_b20201015

TOTOLINK T6

Remediation

Patch Available

https://github.com/d1tto/IoT-vuln/tree/main/Totolink/T6-v2/5.setWiFiRepeaterCfg

Event History

Jul 1, 2022

CVE Published

via MITRE·05:27 PM

Data Sourced

via MITRE·05:27 PM

Description

Frequently Asked Questions

What is the severity of CVE-2022-32044?

CVE-2022-32044 is classified as a medium severity vulnerability due to the potential for exploitation and impact on system functionality.

How do I fix CVE-2022-32044?

To fix CVE-2022-32044, update the firmware of the TOTOLINK T6 to the latest version that addresses this vulnerability.

What specific component of the TOTOLINK T6 is affected by CVE-2022-32044?

CVE-2022-32044 affects the password parameter in the function FUN_00413f80, leading to a stack overflow.

Is CVE-2022-32044 present in other versions of TOTOLINK T6 firmware?

CVE-2022-32044 is specifically associated with the TOTOLINK T6 firmware version 4.1.9cu.5179_B20201015 and may not be present in other versions.

What are the potential impacts of exploiting CVE-2022-32044?

Exploiting CVE-2022-32044 could allow an attacker to execute arbitrary code remotely, potentially leading to unauthorized access or control of the device.