CVE-2024-7186: TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow
A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been classified as critical. This affects the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument comment leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272607. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7186?
CVE-2024-7186 has been classified as critical due to the potential for a buffer overflow vulnerability.
How do I fix CVE-2024-7186?
The recommended fix for CVE-2024-7186 is to update the TOTOLINK A3600R firmware to a version that addresses this vulnerability.
What systems are affected by CVE-2024-7186?
CVE-2024-7186 affects the TOTOLINK A3600R running firmware version 4.1.2cu.5182_B20201102.
What type of vulnerability is CVE-2024-7186?
CVE-2024-7186 is a buffer overflow vulnerability that can be exploited through the setWiFiAclAddConfig function.
Can CVE-2024-7186 be exploited remotely?
Yes, CVE-2024-7186 can potentially be exploited remotely due to its nature and the functionality involved.