CVE-2023-7218

Summary

CVE-2023-7218 is a critical vulnerability affecting the Totolink N350RT with firmware version 9.3.5u.6139_B202012. The issue lies in the loginAuth function of the /cgi-bin/cstecgi.cgi file, where manipulating the password argument leads to a stack-based buffer overflow. An attacker can exploit this remotely. This vulnerability, identified as VDB-249852, was reported to Totolink, but they failed to respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.