{"id":22485,"date":"2025-04-13T01:00:02","date_gmt":"2025-04-13T01:00:02","guid":{"rendered":""},"modified":"2025-05-29T11:44:30","modified_gmt":"2025-05-29T17:44:30","slug":"cve-2024-0576-critical-vulnerability-in-totolink-lr1200gb-leading-to-potential-system-compromise","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-0576-critical-vulnerability-in-totolink-lr1200gb-leading-to-potential-system-compromise\/","title":{"rendered":"CVE-2024-0576: Critical Vulnerability in Totolink LR1200GB Leading to Potential System Compromise<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability has been discovered in the Totolink LR1200GB 9.1.0u.6619_B20230130, a widely used router model. This vulnerability, identified as CVE-2024-0576, allows malicious actors to exploit a buffer overflow issue in the function setIpPortFilterRules of the file \/cgi-bin\/cstecgi.cgi. The vulnerability is particularly alarming due to its high severity, remote exploitability, and the lack of response from the vendor, putting numerous systems at risk of compromise or data<\/a> leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-0576
\nSeverity: Critical (CVSS 8.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Totolink LR1200GB<\/a> | 9.1.0u.6619_B20230130<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability lies within the setIpPortFilterRules function of the file<\/a> \/cgi-bin\/cstecgi.cgi. An attacker can manipulate the argument sPort, which leads to a stack-based buffer overflow<\/a>. A buffer overflow<\/a> occurs when more data is written to a buffer than it can handle, leading to the overflow of the extra data into adjacent memory areas. In this case, an attacker can remotely initiate the attack, exploiting the overflow to execute arbitrary code<\/a>, potentially leading to system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Here is a
\nconceptual<\/strong>
\n example of how the vulnerability might be exploited<\/a>. This could be a crafted HTTP POST request<\/a>:<\/p>\n

POST \/cgi-bin\/cstecgi.cgi HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nsetIpPortFilterRules=sPort[99999]=malicious_payload<\/code><\/pre>\n
In this example, the `sPort` argument is filled with a large quantity of data, leading to a buffer overflow<\/a>. The `malicious_payload` would be the attacker’s code designed to take advantage of the overflow<\/a> to achieve their goal.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
Until the vendor provides a patch for this vulnerability<\/a>, users are advised to implement a Web Application Firewall (WAF) or Intrusion Detection System (IDS) as temporary mitigation. These systems<\/a> can help detect and block attempts to exploit the vulnerability. However, they should not be seen as a permanent solution. Users are encouraged to apply the vendor patch as soon as it becomes available for comprehensive protection.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview A critical vulnerability has been discovered in the Totolink LR1200GB 9.1.0u.6619_B20230130, a widely used router model. This vulnerability, identified as CVE-2024-0576, allows malicious actors to exploit a buffer overflow issue in the function setIpPortFilterRules of the file \/cgi-bin\/cstecgi.cgi. The vulnerability is particularly alarming due to its high severity, remote exploitability, and the lack of […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[86],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-22485","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-buffer-overflow"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t