Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0570

Опубликовано: 16 янв. 2024
Источник: nvd
CVSS3: 7.3
CVSS3: 9.1
CVSS2: 7.5
EPSS Низкий

Описание

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:totolink:n350rt_firmware:9.3.5u.6265:*:*:*:*:*:*:*
cpe:2.3:h:totolink:n350rt:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00197
Низкий

7.3 High

CVSS3

9.1 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 7.3
github
около 2 лет назад

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 42%
0.00197
Низкий

7.3 High

CVSS3

9.1 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-284
CWE-862