CVE-2023-36952

TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...

CVE-2023-36952

TOTOLINK CP300+ (firmware version 5.2cu.7594_B20200910) contains a stack overflow in the setDiagnosisCfg() function, exploitable via the pingIp parameter over the network. The CVE-2023-36952 entry rates this as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high impact on co...