Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7158 State: PUBLISHED Published: 2024-07-28T13:31:03.637Z Last Updated: 2024-08-01T21:52:30.601Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: A3100R Problem Types: CWE-77 Description: A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been declared as critical. This vulnerability affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument telnet_enabled leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272572. NOT
y. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272572. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272572 - https://vuldb.com/?ctiid.272572 - https://vuldb.com/?submit.377543 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3100R/setTelnetCfg.md
CVE ID: CVE-2024-7159 State: PUBLISHED Published: 2024-07-28T14:31:06.336Z Last Updated: 2024-08-01T21:52:30.682Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-259 Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier VDB-272573 was assigned to this vulnerability. NOTE: The vendor was contacted early about thi
ay be used. The identifier VDB-272573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272573 - https://vuldb.com/?ctiid.272573 - https://vuldb.com/?submit.377942 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/product.md
CVE ID: CVE-2024-7160 State: PUBLISHED Published: 2024-07-28T15:00:07.203Z Last Updated: 2024-08-01T21:52:30.737Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: A3700R Problem Types: CWE-77 Description: A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure b
DB-272574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272574 - https://vuldb.com/?ctiid.272574 - https://vuldb.com/?submit.377080 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3700R/setWanCfg.md
CVE ID: CVE-2024-7161 State: PUBLISHED Published: 2024-07-28T15:31:03.856Z Last Updated: 2024-08-01T21:52:30.759Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: SeaCMS Problem Types: CWE-352 Description: A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272575. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272575. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272575 - https://vuldb.com/?ctiid.272575 - https://vuldb.com/?submit.379473 - https://github.com/HuaQiPro/seacms/issues/30
CVE ID: CVE-2024-7162 State: PUBLISHED Published: 2024-07-28T16:00:07.115Z Last Updated: 2024-08-01T21:52:30.765Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: SeaCMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272576. Additional Analyst Notes: - CISA ADP Vulnrichment:
and may be used. The identifier of this vulnerability is VDB-272576. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272576 - https://vuldb.com/?ctiid.272576 - https://vuldb.com/?submit.379474 - https://github.com/HuaQiPro/seacms/issues/29
CVE ID: CVE-2024-7163 State: PUBLISHED Published: 2024-07-28T16:31:04.998Z Last Updated: 2024-08-01T21:52:30.634Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: SeaCMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer/player/index.php. The manipulation of the argument color/vid/url leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272577 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
identifier VDB-272577 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272577 - https://vuldb.com/?ctiid.272577 - https://vuldb.com/?submit.379477 - https://github.com/HuaQiPro/seacms/issues/28
CVE ID: CVE-2024-7164 State: PUBLISHED Published: 2024-07-28T17:00:07.090Z Last Updated: 2024-08-01T21:52:30.945Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272578 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-272578 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272578 - https://vuldb.com/?ctiid.272578 - https://vuldb.com/?submit.380174 - https://gist.github.com/topsky979/d53eab0322b187bfe151b3f1f31958e2
CVE ID: CVE-2024-7165 State: PUBLISHED Published: 2024-07-28T17:31:04.237Z Last Updated: 2024-08-01T21:52:31.014Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_payment.php. The manipulation of the argument ef_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272579. Additional Analyst Notes: - CISA AD
blic and may be used. The associated identifier of this vulnerability is VDB-272579. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272579 - https://vuldb.com/?ctiid.272579 - https://vuldb.com/?submit.380179 - https://gist.github.com/topsky979/efe8fa56e557bf3244909f348d5874f7
CVE ID: CVE-2024-7166 State: PUBLISHED Published: 2024-07-28T18:00:07.503Z Last Updated: 2024-08-01T21:52:30.736Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument ef_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272580. Additional Analyst Notes: - CISA ADP Vulnrich
ublic and may be used. The identifier of this vulnerability is VDB-272580. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272580 - https://vuldb.com/?ctiid.272580 - https://vuldb.com/?submit.380180 - https://gist.github.com/topsky979/8ab4ff5ffb2a555694931d14329f5a5d
CVE ID: CVE-2024-7167 State: PUBLISHED Published: 2024-07-28T18:31:03.590Z Last Updated: 2024-08-01T21:52:30.915Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /manage_course.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272581 was assigned to this vulnerability. Additional Analy
disclosed to the public and may be used. The identifier VDB-272581 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272581 - https://vuldb.com/?ctiid.272581 - https://vuldb.com/?submit.380181 - https://gist.github.com/topsky979/69a797bc0b33fc19144a727a0be31685
CVE ID: CVE-2024-7168 State: PUBLISHED Published: 2024-07-28T19:00:08.277Z Last Updated: 2024-08-01T21:52:30.899Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272582 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-272582 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272582 - https://vuldb.com/?ctiid.272582 - https://vuldb.com/?submit.380184 - https://gist.github.com/topsky979/14187eec46d6bc04772eadae7ac4e930
CVE ID: CVE-2024-7169 State: PUBLISHED Published: 2024-07-28T19:31:04.558Z Last Updated: 2024-08-01T21:52:30.821Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: School Fees Payment System Problem Types: CWE-352 Description: A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272583. Additional Analyst Notes: - CISA ADP Vulnrichment: -
ed. The associated identifier of this vulnerability is VDB-272583. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272583 - https://vuldb.com/?ctiid.272583 - https://vuldb.com/?submit.380185 - https://gist.github.com/topsky979/421c916be6ab09dc990896b07185ec89
CVE ID: CVE-2024-7170 State: PUBLISHED Published: 2024-07-28T22:00:06.652Z Last Updated: 2024-08-01T21:52:30.503Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: TOTOLINK Products: A3000RU Problem Types: CWE-259 Description: A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272591. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa
is vulnerability is VDB-272591. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272591 - https://vuldb.com/?ctiid.272591 - https://vuldb.com/?submit.377957 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3000RU/product.md
CVE ID: CVE-2024-7171 State: PUBLISHED Published: 2024-07-28T22:31:03.790Z Last Updated: 2024-08-01T21:52:31.099Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-78 Description: A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostTime leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272592. NOTE: The vendor was contacted early about this disclosure
be used. The identifier of this vulnerability is VDB-272592. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272592 - https://vuldb.com/?ctiid.272592 - https://vuldb.com/?submit.378038 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/NTPSyncWithHost.md
CVE ID: CVE-2024-7172 State: PUBLISHED Published: 2024-07-28T23:00:08.214Z Last Updated: 2024-08-01T21:52:31.007Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this vulnerability is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272593 was assigned to this vulnerability. NOTE: The vendor was contact
o the public and may be used. The identifier VDB-272593 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272593 - https://vuldb.com/?ctiid.272593 - https://vuldb.com/?submit.378039 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/getSaveConfig.md
CVE ID: CVE-2024-7173 State: PUBLISHED Published: 2024-07-28T23:31:04.221Z Last Updated: 2024-08-01T21:52:31.013Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/http_host leads to buffer overflow. The attack may be launched remotely. VDB-272594 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272594 - https://vuldb.com/?ctiid.272594 - https://vuldb.com/?submit.378040 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/loginauth.md
CVE ID: CVE-2024-7174 State: PUBLISHED Published: 2024-07-29T00:00:05.545Z Last Updated: 2024-08-01T21:52:30.807Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setdeviceName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument deviceMac/deviceName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272595. NOTE: The vendor was contacted ear
ublic and may be used. The associated identifier of this vulnerability is VDB-272595. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272595 - https://vuldb.com/?ctiid.272595 - https://vuldb.com/?submit.378041 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setDeviceName.md
CVE ID: CVE-2024-7175 State: PUBLISHED Published: 2024-07-29T00:31:04.158Z Last Updated: 2024-08-01T21:52:30.999Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-78 Description: A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ipDoamin leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272596. NOTE: The vendor was contacted early about this
ic and may be used. The identifier of this vulnerability is VDB-272596. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272596 - https://vuldb.com/?ctiid.272596 - https://vuldb.com/?submit.378042 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setDiagnosisCfg.md
CVE ID: CVE-2024-7176 State: PUBLISHED Published: 2024-07-29T01:01:19.532Z Last Updated: 2024-08-01T21:52:30.812Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical. This issue affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument comment leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272597 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure b
e identifier VDB-272597 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272597 - https://vuldb.com/?ctiid.272597 - https://vuldb.com/?submit.378043 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setIpQosRules.md
CVE ID: CVE-2024-7177 State: PUBLISHED Published: 2024-07-29T01:31:03.907Z Last Updated: 2024-08-01T21:52:31.116Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272598 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this d
be used. VDB-272598 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272598 - https://vuldb.com/?ctiid.272598 - https://vuldb.com/?submit.378044 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setLanguageCfg.md
CVE ID: CVE-2024-7178 State: PUBLISHED Published: 2024-07-29T02:00:08.334Z Last Updated: 2024-08-01T21:52:30.721Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. Affected by this vulnerability is the function setMacQos of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument priority/macAddress leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272599. NOTE: The vendor was contacted
he public and may be used. The associated identifier of this vulnerability is VDB-272599. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272599 - https://vuldb.com/?ctiid.272599 - https://vuldb.com/?submit.378045 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setMacQos.md
CVE ID: CVE-2024-7179 State: PUBLISHED Published: 2024-07-29T02:31:03.995Z Last Updated: 2024-08-01T21:52:30.671Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3600R Problem Types: CWE-120 Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument startTime/endTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272600. NOTE: The vendor was contacted early about this
lic and may be used. The identifier of this vulnerability is VDB-272600. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.272600 - https://vuldb.com/?ctiid.272600 - https://vuldb.com/?submit.378048 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/setParentalRules.md