Описание
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Ссылки
EPSS
10 Critical
CVSS3
10 Critical
CVSS2
Дефекты
Связанные уязвимости
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Уязвимость функции setSystemConfig() компонента CGI Handler микропрограммного обеспечения маршрутизаторов Totolink-N600R, позволяющая нарушителю выполнить произвольный код
EPSS
10 Critical
CVSS3
10 Critical
CVSS2