Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m237-23r2-f38w

Опубликовано: 19 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.4
CVSS3: 8.8

Описание

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

EPSS

Процентиль: 34%
0.00141
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.8
nvd
17 дней назад

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVSS3: 8.8
fstec
28 дней назад

Уязвимость функции setWiFiEasyGuestCfg() микропрограммного обеспечения роутеров TOTOLINK A3700R, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 34%
0.00141
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119