CVE-2024-28640
high · 7.5Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field.
7.5
CVSS
14.2%
EPSS (exploit prob.)
96th
EPSS percentile
2024-03-16
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| totolink | x5000r_firmware | 9.1.0u.6118_b20201102 |
| totolink | x5000r | all versions |
| totolink | a7000r_firmware | 9.1.0u.6115_b20201022 |
| totolink | a7000r | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2024-28640