CVE-2024-7336 — Classic Buffer Overflow in Ex200

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
8.7HIGHNVD
EPSS
0.4%
top 40.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink Ex200Totolink Ex200 Firmware
Timeline
PublishedAug 1

Description

A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273259. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5totolink/ex2004.0.3c.7646_B20201211
▶NVDtotolink/ex200_firmware4.0.3c.7646_b20201211

🔴Vulnerability Details

2
CVEList
TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow↗2024-08-01
▶
GHSA
GHSA-vp2r-2xj4-fq27: A vulnerability classified as critical was found in TOTOLINK EX200 4↗2024-08-01
▶
CVE-2024-7336 — Classic Buffer Overflow in Ex200 | cvebase