CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in the TOTOLINK NR1800X router allows remote attackers to manipulate the FileName argument in the setUploadSetting function, potentially leading to arbitrary code execution. Given its critical severity and public exploit availability, organizations using this router model should prioritize immediate patching or mitigation efforts to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.