Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v5j6-9mr9-qwhr

Опубликовано: 01 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.

EPSS

Процентиль: 45%
0.00585
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 9.8
nvd
4 месяца назад

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.

CVSS3: 9.8
fstec
4 месяца назад

Уязвимость функции setAppEasyWizardConfig микропрограммного обеспечения роутера TOTOLink A3600R, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 45%
0.00585
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120