Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27xh-5cf4-q5gc

Опубликовано: 19 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.4
CVSS3: 8.8

Описание

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 34%
0.00141
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.8
nvd
17 дней назад

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVSS3: 8.8
fstec
27 дней назад

Уязвимость функции setWizardCfg() микропрограммного обеспечения роутеров TOTOLINK LR350, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 34%
0.00141
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119