CVE-2024-0574

Summary

CVE-2024-0574 is a newly disclosed critical vulnerability affecting the Totolink LR1200GB 9.1.0u.6619_B20230130 firmware. This issue resides in the setParentalRules function of the /cgi-bin/cstecgi.cgi file and is triggered by manipulating the argument sTime. The consequence is a stack-based buffer overflow, potentially leading to remote code execution. The exploit for this vulnerability has been made public, increasing the risk for attacks. VDB-250790 is the assigned identifier for this issue, and despite early disclosure attempts, the vendor has not responded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.