CVE-2024-8578: TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow
First published: Sun Sep 08 2024(Updated: )
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this issue is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument device_name leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Totolink T8 Firmware | =4.1.5cu.861_b20230220 | |
| TOTOLINK T8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-8578?
CVE-2024-8578 has been rated as critical due to the potential for a buffer overflow vulnerability.
How do I fix CVE-2024-8578?
To fix CVE-2024-8578, users should update the TOTOLINK AC1200 T8 firmware to a patched version that addresses this vulnerability.
What is affected by CVE-2024-8578?
CVE-2024-8578 affects the TOTOLINK AC1200 T8 running firmware version 4.1.5cu.861_B20230220.
What type of vulnerability is CVE-2024-8578?
CVE-2024-8578 is a buffer overflow vulnerability found in the function setWiFiMeshName of the firmware.
What may an attacker accomplish with CVE-2024-8578?
An attacker exploiting CVE-2024-8578 could potentially take control of the device through the manipulation of the device_name argument.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/totolink
- canonical/totolink t8 firmware
- version/totolink t8 firmware/4.1.5cu.861_b20230220
- canonical/totolink t8