CVE-2024-7331

Summary

CVE-2024-7331 is a critical vulnerability affecting the TOTOLINK A3300R router running version 17.0.0cu.557_B20221024. The UploadCustomModule function in the /cgi-bin/cstecgi.cgi file is the source of the issue, where manipulation of the File argument results in a buffer overflow. This vulnerability is remotely exploitable, and the exploit has been publicly disclosed, increasing the risk for potential attacks. VDB-273254 is the identifier assigned to this issue, and despite early outreach, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.