Описание
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- Broken Link
- Press/Media Coverage
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Product
Уязвимые конфигурации
Одновременно
EPSS
8.8 High
CVSS3
6.5 Medium
CVSS3
9 Critical
CVSS2
Дефекты
Связанные уязвимости
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Уязвимость встроенного веб-сервера boa (/boafrm/formReflashClientTbl) микропрограммного обеспечения роутеров TOTOLINK X15, позволяющая нарушителю выполнить произвольные команды или вызвать отказ в обслуживании
EPSS
8.8 High
CVSS3
6.5 Medium
CVSS3
9 Critical
CVSS2