Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.
References
| Link | Resource |
|---|---|
| https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_1.md | Exploit Third Party Advisory |
| https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_1.md | Exploit Third Party Advisory |
Configurations
History
16 Dec 2024, 22:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:* cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:* cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-120 | |
| References | () https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_1.md - Exploit, Third Party Advisory | |
| First Time |
Totolink x5000r Firmware
Totolink a7000r Firmware Totolink x5000r Totolink a7000r Totolink |
21 Nov 2024, 09:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ZIKH26/CVE-information/blob/master/TOTOLINK/Vulnerability%20Information_1.md - |
16 Mar 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-16 06:15
Updated : 2025-03-26 15:15
NVD link : CVE-2024-28639
Mitre link : CVE-2024-28639
CVE.ORG link : CVE-2024-28639
JSON object : View
Products Affected
totolink
- a7000r_firmware
- a7000r
- x5000r_firmware
- x5000r
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')