CVE-2024-8575

HIGH

TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 - Buffer Overflow

Title source: llm
STIX 2.1

Description

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.276809
Permissions Required signature permissions-required
https://vuldb.com/?ctiid.276809
Third Party Advisory third-party-advisory
https://vuldb.com/?submit.401263
Product product
https://www.totolink.net/

Scores

CVSS v3 8.8
EPSS 0.0030
EPSS Percentile 52.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-120
Status published
Products (1)
totolink/t8_firmware 4.1.5cu.861_b20230220
Published Sep 08, 2024
Tracked Since Feb 18, 2026