Lucene search
HistoryJun 13, 2024 - 7:15 p.m.
CVE-2024-37632
totolink
a3700r
stack overflow
password parameter
loginauth function
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.009
Percentile
83.1%
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
Affected configurations
Node
totolinka3700r_firmwareMatch9.1.2u.6165_20211012
totolinka3700rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | a3700r_firmware | 9.1.2u.6165_20211012 | cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.6165_20211012:*:*:*:*:*:*:* |
| totolink | a3700r | - | cpe:2.3:h:totolink:a3700r:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-37632
2024-06-13 19:15:52
cvelist
cvelist
CVE-2024-37632
2024-06-13 00:00:00
vulnrichment
vulnrichment
CVE-2024-37632
2024-06-13 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.009
Percentile
83.1%
Related for NVD:CVE-2024-37632