Medium severity · published Jan 26, 2024
CVE-2024-0943
A vulnerability was found in Totolink N350RT 9.3.5u.6255
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252187. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
N350rt Firmware · Totolink
9.3.5u.6255 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-0943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-0943
Third Party Advisory
https://drive.google.com/file/d/1OBs4kc1KvbqrMhQHs54WtwxxxiBoI0hL/view?usp=sharing
Permissions Required
https://vuldb.com/?ctiid.252187
Third Party Advisory
https://vuldb.com/?id.252187
vuldb.com
https://vuldb.com/?submit.269680
More from N350rt Firmware
9.8
CVE-2025-51630
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules
9.8
CVE-2024-42966
Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a…
9.8
CVE-2024-7462
A vulnerability classified as critical has been found in TOTOLINK N350RT 9.3.5u.6139_B20201216
9.8
CVE-2023-7219
A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical
9.1
CVE-2024-0570
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265