CVE-2024-7335: falha de alta gravidade em TOTOLINK EX200
TOTOLINK EX200 getSaveConfig buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 1.2%
A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273258 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TOTOLINK · EX200CVEs relacionadas — TOTOLINK EX200
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7336HIGHTOTOLINK EX200 cstecgi.cgi loginauth buffer overflowEPSS 1.3%CVE-2026-15271HIGHTOTOLINK EX200 Web boa.conf least privilege violationEPSS 0.7%CVE-2026-114382CRITICALTOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflowEPSS 0.7%CVE-2026-114383CRITICALTOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflowEPSS 0.7%CVE-2026-11620MEDIUMTOTOLINK EX200 vsftpd vsftpd.conf least privilege violationEPSS 0.3%