Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4p43-rxhv-xw72

Опубликовано: 14 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.9
CVSS3: 9.8

Описание

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

EPSS

Процентиль: 53%
0.00785
Низкий

8.9 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 9.8
nvd
19 дней назад

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVSS3: 9.8
fstec
около 2 месяцев назад

Уязвимость функции Form_Logout() файла /formLogout.htm микропрограммного обеспечения маршрутизаторов TOTOLINK NR1800X, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 53%
0.00785
Низкий

8.9 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-119