Description
A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the impact is to bypass the validation which leads to to OS command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TOTOLINK | N200RE V5 | affected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-54594 | A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the impact is to bypass the validation which leads to to OS command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-02T07:37:59.564Z
Reserved: 2023-09-03T06:48:52.219Z
Link: CVE-2023-4746
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-04T01:15:07.437
Modified: 2024-11-21T08:35:53.300
Link: CVE-2023-4746
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses