CVE-2021-43636

Published: Mar 25, 2022Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Two Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function when processing host data in the HTTP request process.

Affected (1)

Products: Totolink: T10 V2 Firmware

Totolink

1 product

T10 V2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Totolink T10 V2 Firmware	Version 4.1.8cu.5207_b20210320

Running on/with	Platform Versions
Totolink T10 V2	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://note.youdao.com/s/918vCBNT

Source: cve@mitre.org

Broken Link

https://note.youdao.com/s/918vCBNT

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.