Stack Buffer Overflow Vulnerability in TOTOLINK CP450
CVE-2024-34212

7.3HIGH

Key Information:

Vendor

TOTOLINK
Status
Cp450 Firmware
Vendor
CVE Published:
14 May 2024

What is CVE-2024-34212?

The TOTOLINK CP450 version 4.1.0cu.747_B20191224 includes a stack buffer overflow vulnerability within the CloudACMunualUpdate function. This vulnerability can be exploited by an attacker to execute arbitrary code or cause unexpected behavior, compromising the security of the device. Users and administrators should take immediate action to mitigate this flaw by applying any available patches and reviewing their device settings.

References

https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudAC...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.