CVE-2024-8573: TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861B20230220/4.1.8cu.5207. This affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc/week/sTime/eTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8573?
CVE-2024-8573 is classified as a critical vulnerability.
How do I fix CVE-2024-8573?
To fix CVE-2024-8573, update the firmware of TOTOLINK AC1200 T8 or T10 to the latest version.
What systems are affected by CVE-2024-8573?
CVE-2024-8573 affects TOTOLINK AC1200 T8 firmware version 4.1.5cu.861_b20230220 and TOTOLINK AC1200 T10 firmware version 4.1.8cu.5207.
What type of vulnerability is CVE-2024-8573?
CVE-2024-8573 is a buffer overflow vulnerability found in the setParentalRules function.
What are the potential impacts of CVE-2024-8573?
Exploitation of CVE-2024-8573 can lead to unauthorized access and potentially allow attackers to execute arbitrary code.