Lucene search

K
cveMitreCVE-2024-42545
HistoryAug 12, 2024 - 6:15 p.m.

CVE-2024-42545

2024-08-1218:15:12
CWE-120
mitre
web.nvd.nist.gov
32
totolink
a3700r
buffer overflow
vulnerability
ssid parameter

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.

Affected configurations

Nvd
Node
totolinka3700r_firmwareMatch9.1.2u.5822_b20200513
AND
totolinka3700rMatch-
VendorProductVersionCPE
totolinka3700r_firmware9.1.2u.5822_b20200513cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.5822_b20200513:*:*:*:*:*:*:*
totolinka3700r-cpe:2.3:h:totolink:a3700r:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

Related for CVE-2024-42545