CVE-2023-7219

A vulnerability has been found in Totolink N350RT 9.3.5u.6139_B202012 and classified as critical. Affected by this vulnerability is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249853 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-121

• https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N350RT/5/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.249853Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249853Permissions Required, Third Party Advisory
• https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N350RT/5/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.249853Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249853Permissions Required, Third Party Advisory

Published

Jan 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7212A vulnerability classified as critical has been found in DeD…9.8
• CVE-2023-7213A vulnerability classified as critical was found in Totolink…8.8
• CVE-2023-7214A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-7215A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-7216A path traversal vulnerability was found in the CPIO utility…5.3
• CVE-2023-7218A vulnerability, which was classified as critical, was found…7.2
• CVE-2023-7220A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B2…9.8
• CVE-2023-7221A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210…9.8
• CVE-2023-7222A vulnerability was found in Totolink X2000R 1.0.0-B20221212…9.8
• CVE-2023-7223A vulnerability classified as problematic has been found in …6.5
• CVE-2023-7224OpenVPN Connect version 3.0 through 3.4.6 on macOS allows lo…7.8
• CVE-2023-7225The MapPress Maps for WordPress plugin for WordPress is vuln…5.4