ID
VAR-202401-0075
CVE
CVE-2023-7213
TITLE
TOTOLINK of n350rt Out-of-bounds write vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by this vulnerability is the function main of the file /cgi-bin/cstecgi.cgi?action=login&flag=1 of the component HTTP POST Request Handler. The manipulation of the argument v33 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249769 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. TOTOLINK of n350rt An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK N350RT is a small home router produced by China's TOTOLINK Electronics Company. The vulnerability is caused by the fact that the parameter v33 of the function main in /cgi-bin/cstecgi.cgi?action=login&flag=1 fails to correctly verify the length of the input data. Attackers can exploit this vulnerability to cause a denial of service attack
Trust: 2.25
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | totolink | model: | n350rt | scope: | eq | version: | 9.3.5u.6139_b20201216 | Trust: 1.0 |
| vendor: | totolink | model: | n350rt | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | n350rt | scope: | - | version: | - | Trust: 0.8 |
| vendor: | totolink | model: | n350rt | scope: | eq | version: | n350rt firmware 9.3.5u.6139 b20201216 | Trust: 0.8 |
| vendor: | totolink | model: | n350rt 9.3.5u.6139 b20201216 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2023-7213 | Trust: 3.3 |
| db: | VULDB | id: | 249769 | Trust: 1.7 |
| db: | JVNDB | id: | JVNDB-2024-001227 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-15337 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2023-7213 | Trust: 0.1 |
REFERENCES
| url: | https://github.com/jylsec/vuldb/blob/main/totolink/n350rt/2/readme.md | Trust: 1.9 |
| url: | https://vuldb.com/?id.249769 | Trust: 1.7 |
| url: | https://vuldb.com/?ctiid.249769 | Trust: 1.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2023-7213 | Trust: 0.8 |
| url: | https://cwe.mitre.org/data/definitions/121.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | CNVD | id: | CNVD-2025-15337 |
| db: | VULMON | id: | CVE-2023-7213 |
| db: | JVNDB | id: | JVNDB-2024-001227 |
| db: | NVD | id: | CVE-2023-7213 |
LAST UPDATE DATE
2025-07-10T23:12:28.769000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-15337 | date: | 2025-07-09T00:00:00 |
| db: | VULMON | id: | CVE-2023-7213 | date: | 2024-01-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-001227 | date: | 2024-02-01T05:41:00 |
| db: | NVD | id: | CVE-2023-7213 | date: | 2024-05-17T02:34:18.533 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-15337 | date: | 2025-07-09T00:00:00 |
| db: | VULMON | id: | CVE-2023-7213 | date: | 2024-01-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-001227 | date: | 2024-02-01T00:00:00 |
| db: | NVD | id: | CVE-2023-7213 | date: | 2024-01-07T19:15:08.230 |