CVE-2024-1000: A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg of the file…

PriorityP268high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.25%

65.7th percentile

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252269 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
floraison	fugit	>= 0 < 1.11.1	1.11.1
google	chrome_chrome	—	—
totolink	n200re	—	—
totolink	n200re_firmware	—	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.08.3HIGHAV:N/AC:L/Au:M/C:C/I:C/A:C

vendor_cisco9.3CRITICAL

vendor_redhat7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT NetGear WNR2000v5 Buffer Overflow Attempt Inbound (CVE-2017-6862)

suricata·2022-09-06·CVSS 9.8

CVE-2017-6862 [CRITICAL] ET EXPLOIT NetGear WNR2000v5 Buffer Overflow Attempt Inbound (CVE-2017-6862) ET EXPLOIT NetGear WNR2000v5 Buffer Overflow Attempt Inbound (CVE-2017-6862) Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT NetGear WNR2000v5 Buffer Overflow Attempt Inbound (CVE-2017-6862)"; flow:established,to_server; http.method; content:"GET"; http.uri; bsize:>1000; content:"unauth.cgi"; fast_pattern; content:"timestamp="; reference:cve,2017-6862; classtype:attempted-admin; sid:2038736; rev:2; metadata:attack_target Networking_Equipment, created_at 2022_09_06, cve CVE_2017_6862, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag CISA_KEV, updated_at 2024_03_08;)

Suricata

ET DOS SMB Tree_Connect Stack Overflow Attempt (CVE-2017-0016)

suricata·2017-02-03·CVSS 5.9

CVE-2017-0016 [MEDIUM] ET DOS SMB Tree_Connect Stack Overflow Attempt (CVE-2017-0016) ET DOS SMB Tree_Connect Stack Overflow Attempt (CVE-2017-0016) Rule: alert tcp any 445 -> $HOME_NET any (msg:"ET DOS SMB Tree_Connect Stack Overflow Attempt (CVE-2017-0016)"; flow:established,to_client; content:"|FE|SMB"; offset:4; depth:4; content:"|03 00|"; distance:8; within:2; byte_test:1,&,1,2,relative; byte_jump:2,8,little,from_beginning; byte_jump:2,4,relative,little; isdataat:1000,relative; content:!"|FE|SMB"; within:1000; reference:cve,2017-0016; classtype:attempted-dos; sid:2023832; rev:4; metadata:affected_product SMBv3, attack_target Client_and_Server, created_at 2017_02_03, cve CVE_2017_0016, deployment Datacenter, confidence High, signature_severity Major, updated_at 2024_03_07;)

Suricata

GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt

suricata·2010-09-23

CVE-1999-0696 GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL RPC CMSD TCP CMSD_INSERT buffer overflow attempt"; flow:established,to_server; content:"|00 01 86 E4|"; depth:4; offset:16; content:"|00 00 00 06|"; within:4; distance:4; byte_jump:4,4,relative,align; byte_jump:4,4,relative,align; byte_jump:4,0,relative,align; byte_test:4,>,1000,28,relative; content:"|00 00 00 00|"; depth:4; offset:8; reference:bugtraq,524; reference:cve,1999-0696; reference:url,www.cert.org/advisories/CA-99-08-cmsd.html; classtype:misc-attack; sid:2101909; rev:14; metadata:created_at 2010_09_23, cve CVE_1999_0696, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)