ГлавнаяУязвимости → CVE-2026-4976
8.8высокая

CVE-2026-4976

Описание

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Затрагиваемое ПО
Totolink Lr350 firmwareTotolink Lr350
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://lavender-bicycle-a5a.notion.site/TOTOLINK-LR350-setWiFiGuestCfg-32153a41781f8048a918c1c78e95064e?source=copy_linkhttps://vuldb.com/?ctiid.353863https://vuldb.com/?id.353863https://vuldb.com/?submit.778274https://www.totolink.net/