CVE-2024-7213

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jul 30, 2024
Updated: Aug 6, 2024
CWE ID 120

Summary

CVE-2024-7213 is a critical vulnerability impacting the TOTOLINK A7000R 9.1.0u.6268_B20220504 firmware. The issue lies in the setWizardCfg function of the /cgi-bin/cstecgi.cgi file, where a buffer overflow can be triggered by manipulating the ssid argument. This vulnerability can be exploited remotely, making it a significant security concern. The exploit for this vulnerability, identified as VDB-272784, has been made public, increasing the risk for potential attacks. Unfortunately, the vendor was not responsive to early disclosures about this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share