CVE-2024-7336

Summary

CVE-2024-7336 is a critical vulnerability affecting the TOTOLINK EX200 4.0.3c.7646_B20201211 firmware. The issue lies within the loginauth function of the /cgi-bin/cstecgi.cgi file, where manipulation of the http_host argument can induce a buffer overflow. This vulnerability is remotely exploitable and has been disclosed to the public. The associated identifier for this vulnerability is VDB-273259. Unfortunately, the vendor has not responded to early disclosure attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.