CVE-2023-6906— Totolink A7100RU 安全漏洞

Totolink A7100RU HTTP POST Request main buffer overflow

A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248268. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)

Totolink A7100RU 安全漏洞

TOTOLINK A7100RU是中国吉翁电子（TOTOLINK）公司的一款无线路由器。 Totolink A7100RU 7.4cu.2313_B20191024版本存在安全漏洞，该漏洞源于组件HTTP POST Request Handler中存在安全问题，通过 ie8 参数导致缓冲区溢出。

N/A

N/A