PT-2024-15663
CVE-2024-0570
·
تاريخ النشر
2024-01-16
·
تاريخ التحديث
2024-06-18
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Totolink N350RT version 9.3.5u.6265
Description
A critical vulnerability was found in the Setting Handler component, affecting unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls, and the attack can be initiated remotely.
Recommendations
Upgrade the affected component to a newer version to resolve the issue. As a temporary workaround, consider restricting access to the /cgi-bin/cstecgi.cgi file until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾