| عنوان | Totolink N200RE_V5 V9.3.5u.6255_B20211224 Insufficient Session Expiration |
|---|
| الوصف | [NAME OF AFFECTED PRODUCT(S)] : Totolink N200RE_V5
[AFFECTED VERSION(S)] : V9.3.5u.6255_B20211224
[PROBLEM TYPE] : Insufficient Session Expiration
[CWE] : CWE-613: Insufficient Session Expiration
[Affected source code file] : cstecgi.cgi(web : /cgi-bin/cstecgi.cgi)
[DESCRIPTION]:
The login token does not expire after logging out.
Totolink indicates the vulnerability has been fully patched in version V9.3.5u.6255_B20211224 and the latest patched version can be downloaded at https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/204/ids/36.html
Demo Video : https://youtu.be/b0tU2CiLbnU |
|---|
| المصدر | ⚠️ https://drive.google.com/file/d/1oWAGbmDtHDIUN1WSRAh4ZnuzHOuvTU4T/view?usp=sharing |
|---|
| المستخدم | lin7lic (UID 39301) |
|---|
| ارسال | 18/01/2024 07:00 AM (2 سنوات منذ) |
|---|
| الاعتدال | 26/01/2024 01:37 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 252186 [Totolink N200RE V5 9.3.5u.6255_B20211224 /cgi-bin/cstecgi.cgi توثيق ضعيف] |
|---|
| النقاط | 20 |
|---|