Critical Buffer Overflow in TOTOLINK AC1200 Series - Public Exploit
There is a critical vulnerability in TOTOLINK AC1200 T8 and AC1200 T10 with versions 4.1.5cu.861_B20230220/4.1.8cu.5207. This affects the function setParentalRules in the file /cgi-bin/cstecgi.cgi. Manipulating the desc argument can cause a buffer overflow. The attack can be done remotely. The exploit details are public. The vendor was informed early but did not reply.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
totolink t8 firmware 4.1.5cu.861 b20230220 |
||
totolink t10 firmware 4.1.8cu.5207 |