Lucene search
PRIOn knowledge basePRION:CVE-2023-7218HistoryJan 08, 2024 - 9:15 p.m.
Stack overflow
2024-01-0821:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
loginauth function
cgi
remote attack
nvd
vdb-249852
vendor non-response
A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-249852. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| n350rt_firmware | eq | 9.3.5u.6139-b20201216 |
Related
cve
cve
CVE-2023-7218
2024-01-08 21:15:10
cnvd
cnvd
TOTOLINK N350RT password parameter buffer overflow vulnerability
2024-01-11 00:00:00
cvelist
cvelist
CVE-2023-7218 Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
2024-01-08 21:00:05
nvd
nvd
CVE-2023-7218
2024-01-08 21:15:10