Totolink A7100RU 7.4cu.2313_B20191024 HTTP POST Request cstecgi.cgi?action=login main flag ବଫର୍ ଓଭରଫ୍ଲୋ

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame Totolink A7100RU 7.4cu.2313_B20191024 keessatti argameera. Miidhamni argame is hojii main faayilii /cgi-bin/cstecgi.cgi?action=login keessa kutaa HTTP POST Request Handler keessa. Wanti jijjiirame irratti flag gara ବଫର୍ ଓଭରଫ୍ଲୋ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-120 si geessa. Odeeffannoon kun yeroo 12/24/2023 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2023-7095 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.

3 ଆଡାପ୍ଟେସନ୍ · 63 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
12/24/2023 09:16 AM		ଅଦ୍ୟତନ 1/2
01/18/2024 04:10 PM		ଅଦ୍ୟତନ 2/2
01/18/2024 04:17 PM
software_vendorTotolinkTotolinkTotolink
software_nameA7100RUA7100RUA7100RU
software_version7.4cu.2313_B201910247.4cu.2313_B201910247.4cu.2313_B20191024
software_componentHTTP POST Request HandlerHTTP POST Request HandlerHTTP POST Request Handler
software_file/cgi-bin/cstecgi.cgi?action=login/cgi-bin/cstecgi.cgi?action=login/cgi-bin/cstecgi.cgi?action=login
software_functionmainmainmain
software_argumentflagflagflag
vulnerability_cweCWE-120 (ବଫର୍ ଓଭରଫ୍ଲୋ)CWE-120 (ବଫର୍ ଓଭରଫ୍ଲୋ)CWE-120 (ବଫର୍ ଓଭରଫ୍ଲୋ)
vulnerability_risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cHHH
cvss3_vuldb_iHHH
cvss3_vuldb_aHHH
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
advisory_urlhttps://github.com/unpWn4bL3/iot-security/blob/main/2.mdhttps://github.com/unpWn4bL3/iot-security/blob/main/2.mdhttps://github.com/unpWn4bL3/iot-security/blob/main/2.md
exploit_availability111
exploit_publicity111
exploit_urlhttps://github.com/unpWn4bL3/iot-security/blob/main/2.mdhttps://github.com/unpWn4bL3/iot-security/blob/main/2.mdhttps://github.com/unpWn4bL3/iot-security/blob/main/2.md
source_cveCVE-2023-7095CVE-2023-7095CVE-2023-7095
cna_responsibleVulDBVulDBVulDB
advisory_date1703372400 (12/24/2023)1703372400 (12/24/2023)1703372400 (12/24/2023)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciCCC
cvss2_vuldb_iiCCC
cvss2_vuldb_aiCCC
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore10.010.010.0
cvss2_vuldb_tempscore8.68.68.6
cvss3_vuldb_basescore9.89.89.8
cvss3_vuldb_tempscore8.98.98.9
cvss3_meta_basescore9.89.89.8
cvss3_meta_tempscore8.98.99.3
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1703372400 (12/24/2023)1703372400 (12/24/2023)
cve_nvd_summaryA vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248942 is the identifier assigned to this vulnerability.A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248942 is the identifier assigned to this vulnerability.
cvss2_nvd_avN
cvss2_nvd_acL
cvss2_nvd_auN
cvss2_nvd_ciC
cvss2_nvd_iiC
cvss2_nvd_aiC
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prN
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cH
cvss3_cna_iH
cvss3_cna_aH
cve_cnaVulDB
cvss2_nvd_basescore10.0
cvss3_cna_basescore9.8

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!