Totolink N350RT 9.3.5u.6139_B202012 /cgi-bin/cstecgi.cgi loginAuth Password stack-based overflow
Summary
A vulnerability categorized as critical has been discovered in Totolink N350RT 9.3.5u.6139_B202012. This impacts the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Password results in stack-based overflow.
This vulnerability is reported as CVE-2023-7218. The attack can be launched remotely. No exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
Details
A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability.
The weakness was disclosed 01/07/2024. The advisory is shared for download at github.com. This vulnerability is traded as CVE-2023-7218. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 01/25/2024).
The vendor was contacted early about this disclosure but did not respond in any way.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Once again VulDB remains the best source for vulnerability data.
Product
Vendor
Name
Version
License
Website
- Vendor: https://www.totolink.net/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.2VulDB Meta Temp Score: 7.1
VulDB Base Score: 7.2
VulDB Temp Score: 7.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
CNA Base Score: 7.2
CNA Vector (VulDB): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Stack-based overflowCWE: CWE-121 / CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
0-Day Time: 🔍
Timeline
01/07/2024 🔍01/07/2024 🔍
01/07/2024 🔍
01/25/2024 🔍
Sources
Vendor: totolink.netAdvisory: github.com
Status: Not defined
CVE: CVE-2023-7218 (🔍)
GCVE (CVE): GCVE-0-2023-7218
GCVE (VulDB): GCVE-100-249852
Entry
Created: 01/07/2024 09:42Updated: 01/25/2024 07:27
Changes: 01/07/2024 09:42 (40), 01/25/2024 07:22 (2), 01/25/2024 07:27 (18)
Complete: 🔍
Submitter: jylsec
Cache ID: 216::103
Submit
Accepted
- Submit #260109: TOTOLINK Router N350RT V9.3.5u.6139_B20201216 buffer overflow (by jylsec)
Once again VulDB remains the best source for vulnerability data.
No comments yet. Languages: en.
Please log in to comment.