EUVD-2024-48383

Malicious code in bioql PyPI...

CVE-2024-7462 TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow

A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139B20201216. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-7462

CVE-2024-7462 affects TOTOLINK N350RT (firmware 9.3.5u.6139_B20201216). The vulnerability resides in the cstecgi.cgi script’s setWizardCfg function; manipulating the ssid parameter can trigger a buffer overflow. Exploitation is remote-capable and the exploit has been disclosed publicly. Multiple ...