Threats tagged 'ghsa-mxxp-5rcc-wx4q'

A buffer overflow vulnerability exists in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi POST request handler in Totolink WA300 version 5.2cu.7112_B20190227. This vulnerability can be exploited remotely by manipulating the File argument. Public exploit code has been disclosed. The vulnerability has a high severity with a CVSS score of 8.8.