CVE-2024-0575

CVE-2024-0575 affects Totolink LR1200GB (firmware 9.1.0u.6619_B20230130). The vulnerability is in the setTracerouteCfg function of /cgi-bin/cstecgi.cgi, where manipulating the command argument causes a stack-based buffer overflow. It can be exploited remotely over the network (attack vector: NETW...