CVE-2024-1001 - Totolink N200RE cstecgi.cgi main stack-based overflow

Back Back to CVE browser

CRITICAL

Totolink N200RE cstecgi.cgi main stack-based overflow

Published Jan 29, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.40%

Description

A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function main of the file /cgi-bin/cstecgi.cgi. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor TOTOLINK Product N200RE Default
n/a
- Version
  9.3.5u.6139_B20201216
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TOTOLINK

N200RE

n/a

Version	Status	Constraints
9.3.5u.6139_B20201216	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16778
Advisory
https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-main-942df77e9c70495390e4aed2a29f3d13?pvs=4
exploitThird Party Advisory
https://vuldb.com/?ctiid.252270
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.252270
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16778		Advisory
https://jylsec.notion.site/TOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-main-942df77e9c70495390e4aed2a29f3d13?pvs=4		exploitThird Party Advisory
https://vuldb.com/?ctiid.252270		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.252270		vdb-entrytechnical-descriptionThird Party Advisory