CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability exists in the Form_Logout function of the Totolink NR1800X router running firmware version 9.1.0u.6279_B20210910, allowing remote attackers to exploit the flaw by manipulating the Host argument. This critical vulnerability, with a CVSS score of 9.8, can lead to unauthorized access and potential system compromise. Organizations using this router model should prioritize immediate patching or mitigation to prevent exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.