Critical severity · published Aug 5, 2024
CVE-2024-7462
TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow
9.8
CVSS
1.3%
EPSS
No
On KEV
Description
A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273555. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
N350RT · TOTOLINK
9.3.5u.6139_B20201216 · source: vendor
NF
N350rt Firmware · Totolink
9.3.5u.6139_b20201216 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7462
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7462
Exploit
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/N350R/setWizardCfg.md
Permissions Required
https://vuldb.com/?ctiid.273555
Permissions Required
https://vuldb.com/?id.273555
Third Party Advisory
https://vuldb.com/?submit.381325
More from N350RT
9.8
CVE-2023-7219
Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
9.1
CVE-2024-0570
Totolink N350RT Setting cstecgi.cgi access control
8.8
CVE-2024-7333
TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow
8.8
CVE-2023-7214
Totolink N350RT HTTP POST Request main stack-based overflow
8.8
CVE-2023-7213
Totolink N350RT HTTP POST Request main stack-based overflow