CVE-2024-0998

CWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
8.8HIGH
EPSS
0.5%
top 35.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink N200reTotolink N200re Firmware
Timeline
PublishedJan 29

Description

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252267. NOTE: The vendor was contacted early about this disclosure but did not re…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5totolink/n200re9.3.5u.6139_B20201216
▶NVDtotolink/n200re_firmware9.3.5u.6139_b20201216

🔴Vulnerability Details

2
CVEList
Totolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflow↗2024-01-29
▶
GHSA
GHSA-h3vc-4gq7-6h97: A vulnerability was found in Totolink N200RE 9↗2024-01-29
▶
CVE-2024-0998 (HIGH CVSS 8.8) | A vulnerability was found in Totoli | cvebase.io