CVE-2024-36650

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483", "name": "https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483", "tags": ["Exploit", "Third Party Advisory"], "refsource": ""}, {"url": "https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483", "name": "https://gist.github.com/Swind1er/f442fcac520a48c05c744c7b72362483", "tags": ["Exploit", "Third Party Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack."}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-36650", "ASSIGNER": "cve@mitre.org"}}, "impact": {}, "publishedDate": "2024-06-11T16:15Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:totolink:a3100r_firmware:4.1.2cu.5247_b20211129:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-06-04T17:24Z"}