CVE-2023-46977

2023-10-3114:15:11

CWE-787

[email protected]

web.nvd.nist.gov

totolink lr1200gb

stack overflow

loginauth

password parameter

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.8%

JSON

TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.

Affected configurations

Nvd

Node

totolinklr1200gb_firmwareMatch9.1.0u.6619_b20230130

AND

totolinklr1200gbMatch-

VendorProductVersionCPE
totolinklr1200gb_firmware9.1.0u.6619_b20230130cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:*:*:*:*:*:*:*
totolinklr1200gb-cpe:2.3:h:totolink:lr1200gb:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	lr1200gb_firmware	9.1.0u.6619_b20230130	cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:::::::*
totolink	lr1200gb	-	cpe:2.3:h:totolink:lr1200gb:-:::::::*