| 제목 | TOTOLINK X15 V1.0.0-B20230714.1105 Command Injection |
|---|
| 설명 | TOTOLINK X15 V1.0.0-B20230714.1105 router has a serious buffer overflow vulnerability and a serious command injection vulnerability. This vulnerability can be triggered through the route /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to buffer overflow and command injection. An attacker can implement a denial of service attack by sending a malicious HTTP POST request. |
|---|
| 원천 | ⚠️ https://github.com/panda666-888/vuls/blob/main/totolink/x15/formMapDelDevice.md |
|---|
| 사용자 | panda_0x1 (UID 87576) |
|---|
| 제출 | 2025. 07. 25. PM 06:01 (9 개월 ago) |
|---|
| 모더레이션 | 2025. 07. 26. PM 03:56 (22 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 317832 [TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formMapDelDevice macstr 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|