Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter.
References
| Link | Resource |
|---|---|
| https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_2/2.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
08 Aug 2023, 14:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
09 Feb 2022, 03:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:* cpe:2.3:h:totolink:a830r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a720r:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:a830r_firmware:5.9c.4729_b20191112:*:*:*:*:*:*:* cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5050_b20200504:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 7.8
v3 : 7.5 |
| References | (MISC) https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_2/2.md - Exploit, Third Party Advisory | |
| First Time |
Totolink a720r
Totolink a3100r Firmware Totolink a830r Firmware Totolink a3100r Totolink Totolink a720r Firmware Totolink a830r |
|
| CWE | CWE-787 |
04 Feb 2022, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-02-04 02:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-44246
Mitre link : CVE-2021-44246
CVE.ORG link : CVE-2021-44246
JSON object : View
Products Affected
totolink
- a720r_firmware
- a830r_firmware
- a830r
- a3100r
- a3100r_firmware
- a720r
CWE