CVE-2024-7463

A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2024-7463 TOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflow

A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2024-7463

CVE-2024-7463 affects TOTOLINK CP900 (v6.3c.566). The vulnerability is in the UploadCustomModule function of /cgi-bin/cstecgi.cgi, where unsafely handling the File parameter leads to a buffer overflow. This allows remote exploitation and could enable arbitrary code execution or device compromise....