CVE-2023-7220CWE-121

Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow

Critical · published January 9, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
74.1
In the wild
Unconfirmed
What it is

🚨 A remote attack is just a modified password away! The Totolink NR1800X has a stack-based buffer overflow vulnerability that is absolutely critical! 🔥 Think of it like a hotel with a broken door lock; if someone knows the right password, they can waltz right in and rummage through your valuables without anyone stopping them! An attacker could exploit this vulnerability to execute arbitrary code, gain unauthorized access, and potentially take full control of your device. This could lead to serious consequences, including data breaches and network compromises!

Put simply

Think of it like a hotel with a broken door lock; if someone knows the right password, they can waltz right in and rummage through your valuables without anyone stopping them! CVE-2023-7220 is a stack-based buffer overflow vulnerability found in the loginAuth function of the Totolink NR1800X router, where manipulating the password argument allows for remote code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, gain unauthorized access, and potentially take full control of your device. This could lead to serious consequences, including data breaches and network compromises! Ensure you patch the Totolink NR1800X to the latest version that resolves this issue. If you haven’t updated your device recently, it’s time to check for those updates immediately and enhance your network security! You've got this! Follow these steps, and you'll secure your device in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01499 · 74.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-01-09T07:31Z
EPSS history
Timeline
  • 09 JAN 07:31Z
    Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow
    cvelistv5