PT-2023-8246 · Totolink · Totolink N350Rt

Jylsec · Published 2023-12-31 · Updated 2024-05-17 · CVE-2023-7187

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Totolink N350RT version 9.3.5u.6139 B20201216

Description A critical issue affects the processing of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 of the component HTTP POST Request Handler, leading to a stack-based buffer overflow. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations As a temporary workaround, consider disabling the /cgi-bin/cstecgi.cgi endpoint until a patch is available. Restrict access to the HTTP POST Request Handler to minimize the risk of exploitation. Avoid using the action and flag parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-00283

CVE-2023-7187

Affected Products

Totolink N350Rt

References · 13

• 🔥❌ https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N350RT/1/README.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2023-7187 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-7187 · Security Note
• https://vuldb.com/?id.249389 · Note
• https://t.me/cvenotify/66477 · Telegram Post
• https://twitter.com/CVEnew/status/1741462540570493021 · Twitter Post
• https://t.me/cvenotify/65854 · Telegram Post
• https://vuldb.com/?ctiid.249389 · Note
• https://github.com/advisories/GHSA-w6vc-3rw3-4m6g · Note
• https://t.me/cibsecurity/74069 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1741482593382490343 · Twitter Post
• https://twitter.com/NUYTSTECH/status/1747093462628085844 · Twitter Post