Lucene search
PRIOn knowledge basePRION:CVE-2024-0943HistoryJan 26, 2024 - 8:15 p.m.
Design/Logic Flaw
2024-01-2620:15:00
PRIOn knowledge base
www.prio-n.com
4
totolink n350rt
remote attack
session expiration
complexity high
exploit disclosure
vulnerability identifier vdb-252187
non-responsive vendor
nvd
A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252187. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| n350rt_firmware | eq | 9.3.51176255 |
Related
cnvd
cnvd
TOTOLINK N350RT Session Hijacking Vulnerability
2024-01-30 00:00:00
nvd
nvd
CVE-2024-0943
2024-01-26 20:15:54
cvelist
cvelist
CVE-2024-0943 Totolink N350RT cstecgi.cgi session expiration
2024-01-26 20:00:05
cve
cve
CVE-2024-0943
2024-01-26 20:15:54