{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2024-0569", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2024-01-16T07:06:04.505Z", "datePublished": "2024-01-16T12:31:04.083Z", "dateUpdated": "2025-06-02T15:11:26.010Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2024-05-29T17:59:39.963Z" }, "title": "Totolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure", "problemTypes": [ { "descriptions": [ { "type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Information Disclosure" } ] } ], "affected": [ { "vendor": "Totolink", "product": "T8", "versions": [ { "version": "4.1.5cu.833_20220905", "status": "affected" } ], "modules": [ "Setting Handler" ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.5cu.862_B20230228 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-250785 was assigned to this vulnerability." }, { "lang": "de", "value": "Es wurde eine Schwachstelle in Totolink T8 4.1.5cu.833_20220905 entdeckt. Sie wurde als problematisch eingestuft. Es betrifft die Funktion getSysStatusCfg der Datei /cgi-bin/cstecgi.cgi der Komponente Setting Handler. Durch das Manipulieren des Arguments ssid/key mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.1.5cu.862_B20230228 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen." } ], "metrics": [ { "cvssV4_0": { "version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "baseSeverity": "MEDIUM" } }, { "cvssV3_1": { "version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseSeverity": "MEDIUM" } }, { "cvssV3_0": { "version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseSeverity": "MEDIUM" } }, { "cvssV2_0": { "version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N" } } ], "timeline": [ { "time": "2024-01-16T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed" }, { "time": "2024-01-16T00:00:00.000Z", "lang": "en", "value": "CVE reserved" }, { "time": "2024-01-16T01:00:00.000Z", "lang": "en", "value": "VulDB entry created" }, { "time": "2024-05-29T20:01:01.000Z", "lang": "en", "value": "VulDB entry last update" } ], "credits": [ { "lang": "en", "value": "Chun-Li Lin", "type": "finder" }, { "lang": "en", "value": "lin7lic (VulDB User)", "type": "reporter" }, { "lang": "en", "value": "lin7lic (VulDB User)", "type": "analyst" } ], "references": [ { "url": "https://vuldb.com/?id.250785", "name": "VDB-250785 | Totolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure", "tags": [ "vdb-entry", "technical-description" ] }, { "url": "https://vuldb.com/?ctiid.250785", "name": "VDB-250785 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [ "signature", "permissions-required" ] }, { "url": "https://vuldb.com/?submit.263653", "name": "Submit #263653 | Totolink T8 V4.1.5cu.833_20220905 Broken Access Control", "tags": [ "third-party-advisory" ] }, { "url": "https://www.chtsecurity.com/news/8f270890-12cc-4623-99a3-a81e00758c29", "tags": [ "related" ] }, { "url": "https://drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharing", "tags": [ "exploit" ] }, { "url": "https://www.chtsecurity.com/news/8aa31e69-1e7c-4186-8554-7d5d6baeaa84", "tags": [ "related" ] } ] }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:11:35.081Z" }, "title": "CVE Program Container", "references": [ { "url": "https://vuldb.com/?id.250785", "name": "VDB-250785 | Totolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure", "tags": [ "vdb-entry", "technical-description", "x_transferred" ] }, { "url": "https://vuldb.com/?ctiid.250785", "name": "VDB-250785 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [ "signature", "permissions-required", "x_transferred" ] }, { "url": "https://vuldb.com/?submit.263653", "name": "Submit #263653 | Totolink T8 V4.1.5cu.833_20220905 Broken Access Control", "tags": [ "third-party-advisory", "x_transferred" ] }, { "url": "https://www.chtsecurity.com/news/8f270890-12cc-4623-99a3-a81e00758c29", "tags": [ "related", "x_transferred" ] }, { "url": "https://drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharing", "tags": [ "exploit", "x_transferred" ] }, { "url": "https://www.chtsecurity.com/news/8aa31e69-1e7c-4186-8554-7d5d6baeaa84", "tags": [ "related", "x_transferred" ] } ] }, { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2025-05-08T15:39:11.858140Z", "id": "CVE-2024-0569", "options": [ { "Exploitation": "poc" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-02T15:11:26.010Z" } } ] } }