CVE-2024-34213

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function

Critical · published May 9, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

🚨 A stack buffer overflow in the TOTOLINK CP450 could let attackers take over your router with just one rogue command! 🔥 Think of it like a delivery truck that’s overloaded with packages — when the driver takes a corner too fast, everything spills out. In this case, the server's memory can overflow, allowing sneaky attackers to execute their own code! If exploited, this vulnerability could grant attackers full control over your router, potentially allowing them to hijack network traffic, eavesdrop on communications, or even launch attacks on other devices on the network. The consequences could be absolutely devastating!

Put simply

Think of it like a delivery truck that’s overloaded with packages — when the driver takes a corner too fast, everything spills out. In this case, the server's memory can overflow, allowing sneaky attackers to execute their own code! This vulnerability resides in the SetPortForwardRules function of TOTOLINK CP450 v4.1.0cu.747_B20191224, where a stack buffer overflow occurs, enabling attackers to overwrite adjacent memory and execute arbitrary code.

What to do

If exploited, this vulnerability could grant attackers full control over your router, potentially allowing them to hijack network traffic, eavesdrop on communications, or even launch attacks on other devices on the network. The consequences could be absolutely devastating! Update your router firmware to version 4.1.0cu.748_B20240425 or later immediately to patch this vulnerability. Additionally, review your network settings to ensure no unauthorized configurations exist. 🛡️ You've got this! By taking swift action, you can secure your network and keep those pesky intruders at bay! 💪🌟

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00936 · 60.4th percentile
Published
2024-05-09T16:42Z
EPSS history
Timeline
  • 09 MAY 16:42Z
    TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function
    cvelistv5