CVE-2024-7465: falha de alta gravidade em TOTOLINK CP450
TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 1.3%
A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273558 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TOTOLINK · CP450CVEs relacionadas — TOTOLINK CP450
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7332CRITICALTOTOLINK CP450 Telnet Service product.ini hard-coded passwordEPSS 20.7%CVE-2026-85031CRITICALTOTOLINK CP450 cstecgi.cgi buffer overflowEPSS 0.8%CVE-2026-15271HIGHTOTOLINK EX200 Web boa.conf least privilege violationEPSS 0.7%CVE-2026-11554MEDIUMTOTOLINK CP450 vsftpd vsftpd.conf least privilege violationEPSS 0.2%