Products
TOTOLINK AC1200 Wireless Dual Band Gigabit Router
- A3100R V4.1.2cu.5247_B20211129
Source
cve@mitre.org
Tags
CVE-2024-36650 details
Published : June 11, 2024, 4:15 p.m.
Last Modified : June 11, 2024, 4:15 p.m.
Last Modified : June 11, 2024, 4:15 p.m.
Description
TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483 | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.