Medium severity · published Jan 26, 2024
CVE-2024-0943
Totolink N350RT cstecgi.cgi session expiration
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252187. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
N350RT · Totolink
9.3.5u.6255 · source: vendor
NF
N350rt Firmware · Totolink
9.3.5u.6255 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-0943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-0943
Third Party Advisory
https://drive.google.com/file/d/1OBs4kc1KvbqrMhQHs54WtwxxxiBoI0hL/view?usp=sharing
Permissions Required
https://vuldb.com/?ctiid.252187
Third Party Advisory
https://vuldb.com/?id.252187
vuldb.com
https://vuldb.com/?submit.269680
More from N350RT
9.8
CVE-2024-7462
TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow
9.8
CVE-2023-7219
Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
9.1
CVE-2024-0570
Totolink N350RT Setting cstecgi.cgi access control
8.8
CVE-2024-7333
TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow
8.8
CVE-2023-7214
Totolink N350RT HTTP POST Request main stack-based overflow