Totolink N200RE cstecgi.cgi setOpModeCfg stack-based overflow
CVE-2024-0997

8.8HIGH

Key Information:

Vendor: Totolink
Status: N200RE
Vendor: CVE Published:; 29 January 2024

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability identified in the Totolink N200RE product resides in the function setOpModeCfg located in the file /cgi-bin/cstecgi.cgi, which is prone to a stack-based buffer overflow. The flaw arises from inadequate input validation related to the pppoeUser argument. An attacker could exploit this vulnerability remotely, potentially leading to unauthorized access and control over the device's operations. This issue was publicly disclosed, indicating a need for urgent remediation to protect users from possible exploitation.

Affected Version(s)

N200RE 9.3.5u.6139_B20201216

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-0997 - Proof of Concept