CVE-2023-6906: Totolink A7100RU HTTP POST Request main buffer overflow
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248268. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6906?
CVE-2023-6906 is classified as a critical vulnerability.
How do I fix CVE-2023-6906?
To fix CVE-2023-6906, upgrade the Totolink A7100RU firmware to a version that patches this vulnerability.
What component is affected by CVE-2023-6906?
CVE-2023-6906 affects the HTTP POST Request Handler in the Totolink A7100RU.
What impact does CVE-2023-6906 have on the system?
CVE-2023-6906 allows for unauthorized manipulation of the login function, potentially leading to account compromise.
Which firmware version of Totolink A7100RU is vulnerable to CVE-2023-6906?
The vulnerable firmware version of Totolink A7100RU is 7.4cu.2313_B20191024.