CVE-2024-36650: Buffer Overflow
First published: Tue Jun 11 2024(Updated: )
TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-36650?
CVE-2024-36650 is classified as a critical vulnerability due to the potential for a buffer overflow leading to remote code execution.
How do I fix CVE-2024-36650?
To fix CVE-2024-36650, update the firmware of the TOTOLINK AC1200 Wireless Dual Band Gigabit Router to the latest version available from the manufacturer.
What are the potential impacts of CVE-2024-36650?
CVE-2024-36650 can allow attackers to exploit the buffer overflow vulnerability to execute arbitrary code on the affected router.
Is my router vulnerable if it runs the affected firmware mentioned in CVE-2024-36650?
Yes, routers running the specified firmware version A3100R V4.1.2cu.5247_B20211129 are vulnerable to CVE-2024-36650.
What should I do if I am unable to update the firmware for CVE-2024-36650?
If you cannot update the firmware, it is advised to disconnect the router from the internet to mitigate the risk associated with CVE-2024-36650.
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/nvd-api
- source/NVD
- agent/severity
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/totolink
- canonical/totolink ac1200 wireless dual band gigabit router a3002r_v4