Jackwesley

**Name of the Vulnerable Software and Affected Versions** TOTOLINK WA1200 version 5.9c.2914 **Description** A flaw exists in the HTTP Request Handler component of TOTOLINK WA1200 version 5.9c.2914. Specifically, the issue resides in an unknown function within the `cstecgi.cgi` file. This manipulation results in a null pointer dereference, and the attack can be performed remotely. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK WA300 version 5.2cu.7112 B20190227 **Description** A security issue exists in TOTOLINK WA300 version 5.2cu.7112 B20190227. The `sub 401510` function within the `cstecgi.cgi` file is susceptible to command injection through manipulation of the `UPLOAD FILENAME` argument. This allows for remote exploitation. The exploit for this issue has been publicly disclosed. **Recommendations** Apply a newer version of the software that addresses this vulnerability. As a temporary workaround, restrict access to the `cstecgi.cgi` file or disable the `sub 401510` function until a patch is available. Avoid using the `UPLOAD FILENAME` parameter in the affected file.

**Nome do Software Vulnerável e Versões Afetadas** TOTOLINK T10 versão 4.1.8cu.5083 B20200521 **Descrição** Existe uma falha no firmware do TOTOLINK T10 que permite um estouro de buffer baseado em pilha remoto. O problema está localizado na função `sprintf` no arquivo `/cgi-bin/cstecgi.cgi`. A manipulação do argumento `loginAuthUrl` pode desencadear o estouro. O ataque pode ser realizado remotamente. **Recomendações** Atualize para uma versão mais recente do firmware do TOTOLINK T10 que corrija esta vulnerabilidade.