M202572177

Name of the Vulnerable Software and Affected Versions Totolink A3300R version 17.0.0cu.557 B20221024 Description A security issue exists in Totolink A3300R version 17.0.0cu.557 B20221024. The `vsetTr069Cfg` function within the `/cgi-bin/cstecgi.cgi` file is susceptible to os command injection through manipulation of the `stun pass` argument. The exploit has been publicly disclosed. Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/cgi-bin/cstecgi.cgi` file.

**Name of the Vulnerable Software and Affected Versions** Tenda FH1202 version 1.2.0.14(408) **Description** A stack-based buffer overflow exists in the `fromP2pListFilter` function of the `/goform/P2pListFilter` file. The issue is triggered by manipulating the `page` argument and can be exploited remotely. The exploit has been publicly released. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `/goform/P2pListFilter` file.

**Name of the Vulnerable Software and Affected Versions** Tenda FH1202 version 1.2.0.14(408) **Description** A stack-based buffer overflow exists in the `fromNatStaticSetting` function of the `/goform/NatSaticSetting` file. Manipulation of the `page` argument can trigger the overflow. This issue can be exploited remotely. An exploit has been published. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `/goform/NatSaticSetting` file.

**Name of the Vulnerable Software and Affected Versions** Tenda FH1202 version 1.2.0.14(408) **Description** A stack-based buffer overflow exists in the `fromDhcpListClient` function within the `/goform/DhcpListClient` file of the Tenda FH1202. The `page` argument is susceptible to manipulation, leading to the overflow. Remote exploitation is possible. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.