CVE-2024-0942: Totolink N200RE V5 cstecgi.cgi session expiration
First published: Fri Jan 26 2024(Updated: )
A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-252186 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Totolink N200re V5 Firmware | =9.3.5u.6255_b20211224 | |
| Totolink N200re V5 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0942?
CVE-2024-0942 has been classified as problematic, indicating a significant security risk.
How do I fix CVE-2024-0942?
To mitigate CVE-2024-0942, users should update their Totolink N200RE V5 firmware to a patched version provided by the manufacturer.
What functionality is affected by CVE-2024-0942?
CVE-2024-0942 affects an unknown function of the file /cgi-bin/cstecgi.cgi, leading to session expiration.
Can CVE-2024-0942 be exploited remotely?
Yes, CVE-2024-0942 can be exploited remotely, allowing attackers to affect the vulnerability from a distance.
What consequences can occur due to CVE-2024-0942?
Exploitation of CVE-2024-0942 can lead to unauthorized session expiration, potentially disrupting connectivity or services.
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/event
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/totolink
- canonical/totolink n200re v5 firmware
- version/totolink n200re v5 firmware/9.3.5u.6255_b20211224