CVE-2024-7177

CWE-120 — Classic Buffer OverflowCWE-77 — Command Injection3 documents3 sources
Severity
8.7HIGH
EPSS
0.3%
top 45.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink A3600rTotolink A3600r Firmware
Timeline
PublishedJul 29

Description

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272598 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in an…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5totolink/a3600r4.1.2cu.5182_B20201102
▶NVDtotolink/a3600r_firmware4.1.2cu.5182_b20201102

🔴Vulnerability Details

2
GHSA
GHSA-fvwv-5fff-6fx2: A vulnerability was found in TOTOLINK A3600R 4↗2024-07-29
▶
CVEList
TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow↗2024-07-29
▶
CVE-2024-7177 (HIGH CVSS 8.7) | A vulnerability was found in TOTOLI | cvebase.io