CVE-2024-0943

CWE-613 — Insufficient Session Expiration3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 76.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink N350rtTotolink N350rt Firmware
Timeline
PublishedJan 26

Description

A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252187. NOTE: The vendor w…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5totolink/n350rt9.3.5u.6255
▶NVDtotolink/n350rt_firmware9.3.5u.6255

🔴Vulnerability Details

2
CVEList
Totolink N350RT cstecgi.cgi session expiration↗2024-01-26
▶
GHSA
GHSA-9mx7-g5mq-8w76: A vulnerability was found in Totolink N350RT 9↗2024-01-26
▶