Stack Buffer Overflow in TOTOLINK CP450
CVE-2024-34215

7.3HIGH

Key Information:

Vendor

TOTOLINK
Status
Cp450 Firmware
Vendor
CVE Published:
14 May 2024

What is CVE-2024-34215?

The TOTOLINK CP450 router has been identified with a stack buffer overflow vulnerability within its setUrlFilterRules function. This flaw could potentially be exploited to execute arbitrary code, allowing unauthorized access to network resources. Attackers might leverage this vulnerability to manipulate or disrupt network operations. It highlights a significant concern for users of the affected version, emphasizing the need for timely updates and security measures to protect against potential data breaches and intrusions into network environments.

References

https://github.com/n0wstr/IOTVuln/tree/main/CP450/SetUrlF...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.