Lucene search

K
cveMitreCVE-2024-42547
HistoryAug 12, 2024 - 7:15 p.m.

CVE-2024-42547

2024-08-1219:15:17
CWE-120
mitre
web.nvd.nist.gov
25
totolink a3100r v4.1.2cu.5050_b20200504
buffer overflow vulnerability
loginauth function

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.

Affected configurations

Nvd
Node
totolinka3100r_firmwareMatch4.1.2cu.5050_b20200504
AND
totolinka3100rMatch-
VendorProductVersionCPE
totolinka3100r_firmware4.1.2cu.5050_b20200504cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5050_b20200504:*:*:*:*:*:*:*
totolinka3100r-cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

83.1%

Related for CVE-2024-42547