CVE-2024-7335

Summary

CVE-2024-7335 is a newly disclosed critical vulnerability affecting the TOTOLINK EX200 4.0.3c.7646_B20201211 firmware. The issue lies in the getSaveConfig function of the cstecgi.cgi file, which can be triggered by manipulating the http_host argument. This results in a buffer overflow, enabling remote attackers to exploit the vulnerability. The exploit for this vulnerability, identified as VDB-273258, has been made public, increasing the risk for potential attacks. Despite early notification, the vendor has yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.