PT-2024-1581 · Totolink · Totolink Nr1800X

Jylsec · Published 2024-01-09 · Updated 2024-05-17 · CVE-2023-7220

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Totolink NR1800X version 9.1.0u.6279 B20210910

Description A critical issue affects the loginAuth function of the file /cgi-bin/cstecgi.cgi, where manipulation of the password argument leads to a stack-based buffer overflow. This can be exploited remotely, allowing an attacker to execute arbitrary code. The exploit has been publicly disclosed.

Recommendations For Totolink NR1800X version 9.1.0u.6279 B20210910, as a temporary workaround, consider disabling the loginAuth function until a patch is available. Restrict access to the /cgi-bin/cstecgi.cgi file to minimize the risk of exploitation. Avoid using the password argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-01143

CVE-2023-7220

Affected Products

Totolink Nr1800X

References · 8

• 🔥❌ https://github.com/jylsec/vuldb/blob/main/TOTOLINK/NR1800X/1/README.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2023-7220 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-7220 · Security Note
• https://vuldb.com/?ctiid.249854 · Note
• https://t.me/cvenotify/66722 · Telegram Post
• https://vuldb.com/?id.249854 · Note
• https://twitter.com/CVEnew/status/1744624426790846649 · Twitter Post