PT-2023-7882 · Totolink · Totolink A7100Ru

Unpwn4Bl3 · Published 2023-12-12 · Updated 2024-05-17 · CVE-2023-6906

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 B20191024

Description A critical issue was found in the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer overflow. It is possible to launch the attack remotely. The issue is related to the copying of a buffer without checking the size of the input data, which may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Totolink A7100RU version 7.4cu.2313 B20191024, as a temporary workaround, consider disabling the main function of the /cgi-bin/cstecgi.cgi?action=login file until a patch is available. Restrict access to the HTTP POST Request Handler to minimize the risk of exploitation. Avoid using the flag argument with the input ie8 in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2023-08953

CVE-2023-6906

Affected Products

Totolink A7100Ru

References · 9

• 🔥 https://github.com/unpWn4bL3/iot-security/blob/main/1.md · Exploit
• https://bdu.fstec.ru/vul/2023-08953 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6906 · Security Note
• https://t.me/cvenotify/64516 · Telegram Post
• https://vuldb.com/?ctiid.248268 · Note
• https://twitter.com/vuldb/status/1736328644975612298 · Twitter Post
• https://vuldb.com/?id.248268 · Note
• https://twitter.com/cracbot/status/1737196547329212562 · Twitter Post