Buffer Overflow in TOTOLINK EX1200L Due to Vulnerable Loginauth Function

CVE-2024-7337

What is CVE-2024-7337?

A severe vulnerability has been identified in the TOTOLINK EX1200L model, specifically within the loginauth function located in the /cgi-bin/cstecgi.cgi file. This vulnerability arises from improper handling of the http_host argument, which can lead to a buffer overflow condition. Attackers can exploit this vulnerability remotely, potentially compromising the system’s security and gaining unauthorized access. Despite early notification to the vendor regarding the issue, there has been no response or fix provided. Users of the affected firmware version are advised to take precautionary measures to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References