Submit #378319: TOTOLINK LR350 V9.3.5u.6369_B20220309 Buffer Overflowinfo

TitleTOTOLINK LR350 V9.3.5u.6369_B20220309 Buffer Overflow
DescriptionIn the LR350 V9.3.5u.6369_B20220309 firmware has a command injection vulnerability in the hostName parameter from setWanCfg function.
Source⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/LR350/setWanCfg.md
User
 yhryhryhr_miemie (UID 65492)
Submission07/21/2024 18:11 (2 years ago)
Moderation07/29/2024 20:17 (8 days later)
StatusAccepted
VulDB entry272785 [TOTOLINK LR350 9.3.5u.6369_B20220309 /cgi-bin/cstecgi.cgi setWanCfg Hostname command injection]
Points16

Do you need the next level of professionalism?

Upgrade your account now!