TOTOLINK N350RT Session Hijacking Vulnerability

2024-01-3000:00:00

China National Vulnerability Database

www.cnvd.org.cn

totolink

n350rt

session hijacking

vulnerability

china

gion electronics

/cgi-bin/cstecgi.cgi

script

attack

session expiration

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON

The TOTOLINK N350RT is a small home router from China’s Gion Electronics (TOTOLINK). The TOTOLINK N350RT suffers from a session hijacking vulnerability, which is caused by insufficient session expiration in the /cgi-bin/cstecgi.cgi script. An attacker could use this vulnerability to access other users’ sessions.