CVE-2024-0569: totolink t8_firmware

EPSS trend

Probability

0.95%

Chance of exploitation in the next 30 days

Percentile

61%

Versus all other CVEs

30-day change

0.00 pp

From 0.95% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (drive.google.com)
Maturity: unknown

References

6 links

vuldb.com?id.250785VDB EntryTechnical DescriptionThird Party Advisory
vuldb.com?ctiid.250785SignaturePermissions RequiredThird Party AdvisoryVDB Entry
vuldb.com?submit.263653Third Party AdvisoryVDB Entry
www.chtsecurity.com/news/8f270890-12cc-4623-99a3-a81e00758c29RelatedThird Party Advisory
drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharingExploitThird Party Advisory
www.chtsecurity.com/news/8aa31e69-1e7c-4186-8554-7d5d6baeaa84RelatedThird Party Advisory

Related vulnerabilities

CVE-2024-0944totolinkt8_firmware1.53%2y ago26-01-2024 20:00A vulnerability was found in Totolink T8 4.1.5cu.833_20220905. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252188. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.CVE-2024-46419totolinkt8_firmware0.72%2y ago16-09-2024 00:00TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter.CVE-2024-46424totolinkt8_firmware0.55%2y ago16-09-2024 00:00TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to cause a Denial of Service (DoS) via the File parameter.CVE-2024-46451totolinkt8_firmware1.25%2y ago16-09-2024 00:00TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter.CVE-2024-8574totolinkac1200 t8+13.08%2y ago08-09-2024 11:00A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument slaveIpList leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2024-8579totolinkac1200 t8+11.35%2y ago08-09-2024 19:31A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

All vulnerabilities int8_firmware

CVE-2024-0569: totolink t8_firmware

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References