github.com
https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_2.md CVE-2024-28640
HIGH
Record summary
CVE-2024-28640 has a selected CVSS score of 7.5 (high).
Description
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 18, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
a7000r_firmwareBrowse totolink / a7000r_firmwareDefault status: unknown | CVE List | 9.1.0u.6115_b20201022 | affected |
x5000r_firmwareBrowse totolink / x5000r_firmwareDefault status: unknown | CVE List | 9.1.0u.6118_b20201102 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-28640