CVE-2024-0570

Name of the Vulnerable Software and Affected Versions Totolink N350RT version 9.3.5u.6265

Description A critical vulnerability was found in the Setting Handler component, affecting unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls, and the attack can be initiated remotely.

Recommendations Upgrade the affected component to a newer version to resolve the issue. As a temporary workaround, consider restricting access to the /cgi-bin/cstecgi.cgi file until a patch is available.