CVE-2024-0572

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. It is possible to launch the attack...

CVE-2024-0572

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. It is possible to launch the attack...

CVE-2024-0572

Totolink LR1200GB is affected by CVE-2024-0572: a buffer overflow in the setOpModeCfg function (file /cgi-bin/cstecgi.cgi) triggered by manipulating the pppoeUser parameter. This leads to a stack-based overflow and enables remote code execution. The vulnerability is publicly disclosed and has bee...