CVE-2024-7178

🗓️ 29 Jul 2024 02:00:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

The TOTOLINK A3600R 4.1.2cu.5182_B20201102 has a critical vulnerability in the setMacQos function, allowing remote attackers to cause a buffer overflow via manipulated priority/macAddress argument

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-7178	29 Jul 202406:15	–	circl
CNNVD	TOTOLINK A3600R 安全漏洞	29 Jul 202400:00	–	cnnvd
CNVD	TOTOLINK A3600R setMacQos function buffer overflow vulnerability	31 Jul 202400:00	–	cnvd
Cvelist	CVE-2024-7178 TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow	29 Jul 202402:00	–	cvelist
EUVD	EUVD-2024-48146	3 Oct 202520:07	–	euvd
NVD	CVE-2024-7178	29 Jul 202403:15	–	nvd
Positive Technologies	PT-2024-38140 · Totolink · Totolink A3600R	29 Jul 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-7178	5 Feb 202512:02	–	redhatcve
Vulnrichment	CVE-2024-7178 TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow	29 Jul 202402:00	–	vulnrichment

NVD

Node

totolink a3600r_firmwareMatch4.1.2cu.5182_b20201102

AND

totolink a3600rMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A3600R",
    "versions": [
      {
        "version": "4.1.2cu.5182_B20201102",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setMacQos.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
priority	request body	/cgi-bin/cstecgi.cgi	Buffer overflow in function setMacQos via manipulated priority/macAddress parameter allowing remote exploitation.	CWE-120
macAddress	request body	/cgi-bin/cstecgi.cgi	Buffer overflow in function setMacQos via manipulated priority/macAddress parameter allowing remote exploitation.	CWE-120

21 Nov 2024 09:51Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 48.7

CVSS 29

CVSS 38.8

EPSS0.00296

SSVC

CWE-120