Lucene search

MitreCVE-2023-46977

HistoryOct 31, 2023 - 2:15 p.m.

CVE-2023-46977

2023-10-3114:15:11

CWE-787

mitre

web.nvd.nist.gov

cve-2023-46977

totolink lr1200gb

v9.1.0u.6619_b20230130

stack overflow

loginauth

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

52.8%

JSON

TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.

Affected configurations

Nvd

Node

totolinklr1200gb_firmwareMatch9.1.0u.6619_b20230130

AND

totolinklr1200gbMatch-

VendorProductVersionCPE
totolinklr1200gb_firmware9.1.0u.6619_b20230130cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:*:*:*:*:*:*:*
totolinklr1200gb-cpe:2.3:h:totolink:lr1200gb:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	lr1200gb_firmware	9.1.0u.6619_b20230130	cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:::::::*
totolink	lr1200gb	-	cpe:2.3:h:totolink:lr1200gb:-:::::::*

References

github.com/shinypolaris/vuln-reports/blob/master/TOTOLINK%20LR1200GB/1/README.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

52.8%

JSON

Related for CVE-2023-46977