Threats tagged 'ghsa-wjgf-7c7g-5vwr'

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB and NR1800X router firmware in the cstecgi.cgi binary. The vulnerability arises from improper length validation when processing the "lang" parameter, allowing buffer overflow via sprintf() into fixed-size stack buffers. This flaw can lead to memory corruption or arbitrary code execution without requiring authentication. The issue affects specific firmware versions identified by their build numbers. The CVSS score is 6.5, indicating a medium severity impact primarily on confidentiality and availability.