Lucene search

K
cveMitreCVE-2024-46424
HistorySep 16, 2024 - 1:15 p.m.

CVE-2024-46424

2024-09-1613:15:10
CWE-120
mitre
web.nvd.nist.gov
14
totolink ac1200 t8
buffer overflow
denial of service
uploadcustommodule
cve-2024-46424

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

14.9%

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to cause a Denial of Service (DoS) via the File parameter.

Affected configurations

Nvd
Node
totolinkt8_firmwareMatch4.1.5cu.861_b20230220
AND
totolinkt8Match-
VendorProductVersionCPE
totolinkt8_firmware4.1.5cu.861_b20230220cpe:2.3:o:totolink:t8_firmware:4.1.5cu.861_b20230220:*:*:*:*:*:*:*
totolinkt8-cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

14.9%

Related for CVE-2024-46424