CVE-2023-7095

🗓️ 25 Dec 2023 00:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

Totolink A7100RU 7.4cu.2313_B20191024 Buffer Overflow Vulnerabilit

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability in the main() function of the csteccgi.cgi script (/cgi-bin/cstecgi.cgi?action=login) of the TOTOLINK A7100RU router software allows a perpetrator to execute arbitrary commands.	5 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-7095	25 Dec 202302:26	–	circl
CNNVD	TOTOLINK A7100RU 安全漏洞	25 Dec 202300:00	–	cnnvd
CNVD	TOTOLINK A7100RU buffer overflow vulnerability (CNVD-2023-101089)	27 Dec 202300:00	–	cnvd
Cvelist	CVE-2023-7095 Totolink A7100RU HTTP POST Request main buffer overflow	25 Dec 202300:31	–	cvelist
EUVD	EUVD-2023-59279	25 Dec 202300:31	–	euvd
NVD	CVE-2023-7095	25 Dec 202301:15	–	nvd
OSV	CVE-2023-7095	25 Dec 202301:15	–	osv
Prion	Buffer overflow	25 Dec 202301:15	–	prion
Positive Technologies	PT-2023-8082 · Totolink · Totolink A7100Ru	18 Dec 202300:00	–	ptsecurity

NVD

Node

totolink a7100ru_firmwareMatch7.4cu.2313_b20191024

AND

totolink a7100ruMatch-

[
  {
    "vendor": "Totolink",
    "product": "A7100RU",
    "versions": [
      {
        "version": "7.4cu.2313_B20191024",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/unpWn4bL3/iot-security/blob/main/2.md

Parameter	Position	Path	Description	CWE
flag	request body	/cgi-bin/cstecgi.cgi?action=login	Buffer overflow in HTTP POST Request Handler when processing the flag parameter in /cgi-bin/cstecgi.cgi?action=login.	CWE-120

17 Jun 2026 06:52Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.137

CWE-120