TOTOLINK A950RG router firmware stack buffer overflow
TOTOLINK routers can be hacked with public attack code!
Summary
Four flaws in the cstecgi.cgi web interface of TOTOLINK A950RG router firmware let remote attackers overflow memory. Public exploit code exists.
What to do
Update these devices now!
- TOTOLINK A950RG
Products and platforms
CVE IDs
Sources
- Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · gist.github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · gist.github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · gist.github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · gist.github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen