Stack Buffer Overflow Vulnerability in TOTOLINK CP450
CVE-2024-34201

7.3HIGH

Key Information:

Vendor

TOTOLINK
Status
Cp450 Firmware
Vendor
CVE Published:
14 May 2024

What is CVE-2024-34201?

The TOTOLINK CP450 has been identified to contain a stack buffer overflow vulnerability within the getSaveConfig function. This vulnerability may allow attackers to exploit the affected device, potentially compromising its operation and allowing unauthorized access to sensitive configurations. It is crucial for users of affected versions to implement security measures and update their devices to the latest firmware to mitigate any associated risks.

References

https://github.com/n0wstr/IOTVuln/tree/main/CP450/getSave...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.