CVE-2024-8576: TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow
First published: Sun Sep 08 2024(Updated: )
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Totolink T8 Firmware | =4.1.5cu.861_b20230220 | |
| TOTOLINK T8 | ||
| All of | ||
| Totolink T10 Firmware | =4.1.8cu.5207 | |
| TOTOLINK T10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-8576?
CVE-2024-8576 has been classified as critical.
How do I fix CVE-2024-8576?
To fix CVE-2024-8576, update the firmware of Totolink AC1200 T8 or T10 to the latest version.
What systems are impacted by CVE-2024-8576?
CVE-2024-8576 affects Totolink AC1200 T8 with firmware version 4.1.5cu.861_b20230220 and Totolink AC1200 T10 with firmware version 4.1.8cu.5207.
What is the exploit nature of CVE-2024-8576?
CVE-2024-8576 allows manipulation of the argument 'desc', leading to a buffer overflow.
Is there a known workaround for CVE-2024-8576?
Currently, there is no known workaround for CVE-2024-8576 other than applying the firmware update.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/totolink
- canonical/totolink t8 firmware
- version/totolink t8 firmware/4.1.5cu.861_b20230220
- canonical/totolink t8
- canonical/totolink t10 firmware
- version/totolink t10 firmware/4.1.8cu.5207
- canonical/totolink t10