PT-2024-38134 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical vulnerability was found in the getSaveConfig function of the /cgi-bin/cstecgi.cgi?action=save&setting file. The manipulation of the http host argument leads to a buffer...