CVE-2024-42546

Summary

CVE-2024-42546 is a newly identified buffer overflow vulnerability affecting the TOTOLINK A3100R V4.1.2cu.5050_B20200504 firmware. The issue lies in the loginauth function, which fails to validate input in the password parameter, allowing malicious users to overflow the buffer and potentially execute arbitrary code or crash the system. Successful exploitation could lead to unauthorized access or denial of service. Users are urged to patch their devices as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.