CVE-2024-12352: TOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow
A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function sub40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12352?
CVE-2024-12352 is classified as problematic due to a stack-based buffer overflow vulnerability.
How do I fix CVE-2024-12352?
To fix CVE-2024-12352, update the TOTOLINK EX1800T firmware to a version that mitigates this vulnerability.
What systems are affected by CVE-2024-12352?
CVE-2024-12352 specifically affects the TOTOLINK EX1800T running firmware version 9.1.0cu.2112_B20220316.
What kind of attack can be executed due to CVE-2024-12352?
An attacker can initiate a stack-based buffer overflow attack by manipulating the 'ssid' argument in the vulnerable CGI script.
Is there a known exploit for CVE-2024-12352?
Yes, CVE-2024-12352 has been identified as having potential exploitability through crafted requests aiming at the vulnerable function.