Threats tagged 'ghsa-c4px-fcrj-5258'

A critical buffer overflow vulnerability exists in TOTOLINK CA300-PoE version 6.2c.884 in the setLanConfig function of /cgi-bin/cstecgi.cgi. The flaw arises from improper handling of the lanDns, lanSecDns, and langType arguments, allowing remote attackers to execute code or cause denial of service. Public exploit code is available, increasing the risk of exploitation. No patch or remediation information is provided.