Description
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Totolink | N350RT | 9.3.5u.6265 | — |
References
- VDB-250786 | Totolink N350RT Setting cstecgi.cgi access control vdb-entry
- VDB-250786 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #263655 | Totolink N350RT V9.3.5u.6265 Broken Access Control third-party-advisory
- https://www.chtsecurity.com/news/f6d7ae2c-fb1e-4c31-a9ce-bfc5ee038eb1 related
- https://www.chtsecurity.com/news/16e4f985-8248-4353-a26e-b77ca487ce31 related