Lucene search

K
cveMitreCVE-2024-46419
HistorySep 16, 2024 - 2:15 p.m.

CVE-2024-46419

2024-09-1614:15:13
CWE-120
mitre
web.nvd.nist.gov
15
totolink ac1200
buffer overflow
setwizardcfg
ssid5g
vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.009

Percentile

83.1%

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter.

Affected configurations

Nvd
Node
totolinkt8_firmwareMatch4.1.5cu.861_b20230220
AND
totolinkt8Match-
VendorProductVersionCPE
totolinkt8_firmware4.1.5cu.861_b20230220cpe:2.3:o:totolink:t8_firmware:4.1.5cu.861_b20230220:*:*:*:*:*:*:*
totolinkt8-cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.009

Percentile

83.1%

Related for CVE-2024-46419