| tiêu đề | TOTOLINK NR1800X V9.1.0u.6681_B20230703 Stack-based Buffer Overflow |
|---|
| Mô tả | Since no physical device was available during testing, the target binary was patched to facilitate vulnerability verification. Under normal conditions, successful exploitation requires passing the authentication cookie before the vulnerable code path can be reached. Therefore, the required request parameters were simulated in the test environment. In addition, the vendor stripped the setUploadSetting function from the released binary, which increased the difficulty of reverse engineering and analysis. |
|---|
| Nguồn | ⚠️ https://github.com/lxiansheng488-bit/-/blob/main/TOTOlink/totolink%20setUploadSetting%E6%A0%88%E6%BA%A2%E5%87%BA.pdf |
|---|
| Người dùng | Anonymous User |
|---|
| Đệ trình | 16/07/2026 14:24 (cách đây 1 tháng) |
|---|
| Kiểm duyệt | 30/08/2026 09:46 (1 month later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 397117 [TOTOLINK NR1800X 9.1.0u.6681_B20230703 /cgi-bin/cstecgi.cgi setUploadSetting FileName tràn bộ đệm] |
|---|
| điểm | 20 |
|---|