CVE-2024-0578

Summary

CVE-2024-0578 is a newly disclosed critical vulnerability affecting the Totolink LR1200GB 9.1.0u.6619_B20230130 firmware. The issue lies in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file, where a stack-based buffer overflow can be triggered by manipulating the argument File. This vulnerability can be exploited remotely, allowing attackers to execute arbitrary code. The exploit for this issue has been made public, increasing the risk for potential attacks. VDB-250794 is the identifier assigned to this vulnerability, and unfortunately, the vendor has not responded to disclosure attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.