CVE-2024-8576: TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8576?
CVE-2024-8576 has been classified as critical.
How do I fix CVE-2024-8576?
To fix CVE-2024-8576, update the firmware of Totolink AC1200 T8 or T10 to the latest version.
What systems are impacted by CVE-2024-8576?
CVE-2024-8576 affects Totolink AC1200 T8 with firmware version 4.1.5cu.861_b20230220 and Totolink AC1200 T10 with firmware version 4.1.8cu.5207.
What is the exploit nature of CVE-2024-8576?
CVE-2024-8576 allows manipulation of the argument 'desc', leading to a buffer overflow.
Is there a known workaround for CVE-2024-8576?
Currently, there is no known workaround for CVE-2024-8576 other than applying the firmware update.