CVE-2024-1000

Totolink N200RE (9.3.5u.6139_B20201216) is affected. The vulnerability is in the /cgi-bin/cstecgi.cgi setTracerouteCfg function, where manipulation of the command argument leads to a stack-based buffer overflow. It can be triggered remotely and exploitation has been disclosed publicly. There is n...