CVE-2024-8578

Summary

CVE-2024-8578 is a critical vulnerability affecting the TOTOLINK AC1200 T8 router version 4.1.5cu.861_B20230220, specifically in the setWiFiMeshName function located in /cgi-bin/cstecgi.cgi, which is susceptible to a buffer overflow due to improper handling of the device_name argument. This vulnerability can be exploited remotely without requiring user interaction, posing significant risks to confidentiality, integrity, and availability of affected systems, with potential impacts rated high on the CVSS scale (base score of 8.8). Organizations using this router are advised to apply any available security patches or updates from TOTOLINK immediately to mitigate the risk associated with this vulnerability. Despite early notification of this issue, there has been no response from the vendor regarding remediation efforts. The exploit is publicly disclosed and could be actively utilized by attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.