CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-7465 – TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow
https://notcve.org/view.php?id=CVE-2024-7465
05 Aug 2024 — A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/CP450/loginauth.md • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 6%CPEs: 1EXPL: 1CVE-2024-7332 – TOTOLINK CP450 Telnet Service product.ini hard-coded password
https://notcve.org/view.php?id=CVE-2024-7332
01 Aug 2024 — A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/CP450/product.md • CWE-259: Use of Hard-coded Password •