CVE-2024-7337

NVD Published Date: August 01, 2024 at 03:15 AM
NVD Last Modified: August 09, 2024 at 02:15 PM
Download Patch
Vulnerability ID
CVE-2024-7337
Severity
HIGH
Severity Score
8.8
Summary
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273260. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Mitigation and Patches
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-120

Recent Publish

CVE-2024-7336

CVE-2024-7338

CVE-2024-7339

CVE-2024-1715

CVE-2024-6698

CVE-2024-7342

See SecOps Solution
in action

Schedule Demo