Описание
A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- Exploit
- Exploit
- Permissions Required
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Product
- Exploit
- Exploit
Уязвимые конфигурации
Одновременно
EPSS
8.8 High
CVSS3
7.5 High
CVSS3
9 Critical
CVSS2
Дефекты
Связанные уязвимости
A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Уязвимость встроенного сервера boa (/boafrm/formFilter) микропрограммного обеспечения маршрутизаторов TOTOLINK X15, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
8.8 High
CVSS3
7.5 High
CVSS3
9 Critical
CVSS2