CVE-2024-35403

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35403
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md Broken Link
https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:cp900l_firmware:4.1.5cu.798_b20221228:*:*:*:*:*:*:*
cpe:2.3:h:totolink:cp900l:-:*:*:*:*:*:*:*
History

03 Apr 2025, 00:01

Type Values Removed Values Added
First Time Totolink cp900l
Totolink
Totolink cp900l Firmware
References () https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md - () https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setIpPortFilterRules/README.md - Broken Link
CPE cpe:2.3:h:totolink:cp900l:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:cp900l_firmware:4.1.5cu.798_b20221228:*:*:*:*:*:*:*
Information

Published : 2024-05-28 17:15

Updated : 2025-04-03 00:01

NVD link : CVE-2024-35403

Mitre link : CVE-2024-35403

CVE.ORG link : CVE-2024-35403

JSON object : View

Products Affected

totolink

  • cp900l_firmware
  • cp900l
CWE
CWE-121

Stack-based Buffer Overflow