TOTOLINK AC1200 T8 setDiagnosisCfg buffer overflow
Published Aug 22, 2024
8.7
HIGHCVSS 4.0
EPSS 0.80%
Description
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function setDiagnosisCfg. The manipulation leads to buffer overflow. The attack may be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
Affected
- 4.1.5cu.862_B20230228
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| TOTOLINK | n/a | unknown | Affected
|
- 4.1.5cu.862_b20230228
-
Affected
- 4.1.5cu.862_b20230228
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| TOTOLINK | n/a | unknown | Affected
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48921 Advisory
- https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md relatedThird Party Advisory
- https://vuldb.com/?ctiid.275558 signaturepermissions-requiredPermissions Required
- https://vuldb.com/?id.275558 vdb-entrytechnical-descriptionThird Party Advisory
- https://www.totolink.net/ product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48921 | Advisory | |
| https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md | relatedThird Party Advisory | |
| https://vuldb.com/?ctiid.275558 | signaturepermissions-requiredPermissions Required | |
| https://vuldb.com/?id.275558 | vdb-entrytechnical-descriptionThird Party Advisory | |
| https://www.totolink.net/ | product |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data