Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-7219

Totolink N350RT cstecgi.cgi loginAuth stack-based overflow

Description

A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical. Affected by this vulnerability is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249853 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Totolink N350RT

  • 9.3.5u.6139_B202012affected

References