CVE-2024-0575: Totolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflow
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0575?
CVE-2024-0575 is classified as critical due to the potential for a stack-based buffer overflow.
How do I fix CVE-2024-0575?
To mitigate CVE-2024-0575, update the firmware of the Totolink LR1200GB to the latest version beyond 9.1.0u.6619_B20230130.
What component is affected by CVE-2024-0575?
CVE-2024-0575 affects the function setTracerouteCfg in the /cgi-bin/cstecgi.cgi file.
Can CVE-2024-0575 lead to remote exploitation?
Yes, CVE-2024-0575 allows for remote exploitation due to the stack-based buffer overflow vulnerability.
Which devices are impacted by CVE-2024-0575?
CVE-2024-0575 impacts the Totolink LR1200GB running firmware version 9.1.0u.6619_B20230130.