Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-40041

EPSS 0.38% · P60
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-40041

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
TOTOLINK T10 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TOTOLINK T10是中国吉翁电子（TOTOLINK）公司的一款无线网路系统路由器。 TOTOLINK T10_v2 5.9c.5061_B20200511版本存在安全漏洞，该漏洞源于setWiFiWpsConfig中存在缓冲区溢出漏洞。攻击者可利用该漏洞通过pin参数在MQTT数据包中发送数据，以控制返回地址并执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-40041

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-40041

请登录查看更多情报信息。

Same Patch Batch · n/a · 2023-08-08 · 37 CVEs total

CVE-2023-38761ChurchCRM 跨站脚本漏洞
CVE-2023-38769ChurchCRM SQL注入漏洞
CVE-2023-38768ChurchCRM SQL注入漏洞
CVE-2023-38767ChurchCRM SQL注入漏洞
CVE-2023-38766ChurchCRM 跨站脚本漏洞
CVE-2023-38765ChurchCRM SQL注入漏洞
CVE-2023-38764ChurchCRM SQL注入漏洞
CVE-2023-38763ChurchCRM SQL注入漏洞
CVE-2023-38762ChurchCRM SQL注入漏洞
CVE-2023-38770ChurchCRM SQL注入漏洞
CVE-2023-38760ChurchCRM SQL注入漏洞
CVE-2023-38759wger 跨站请求伪造漏洞
CVE-2023-38758wger 跨站脚本漏洞
CVE-2023-40042TOTOLINK T10 缓冲区错误漏洞
CVE-2023-39086ASUS RT-AC66U 安全漏洞
CVE-2023-36482SAMSUNG Mobile devices 安全漏洞
CVE-2023-36344Diebold Nixdorf Vynamic View Console 代码问题漏洞
CVE-2023-26961Alteryx Server 跨站脚本漏洞
CVE-2023-37683Online Nurse Hiring System 跨站脚本漏洞
CVE-2023-39976libqb 安全漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-40041

No comments yet

Leave a comment