CVE-2024-37640 is a high-severity stack overflow vulnerability affecting TOTOLINK A3700R V9.1.2u.6165_20211012 firmware, specifically within the setWiFiEasyGuestCfg function via the ssid5g parameter. With a CVSS score of 8.8, this vulnerability can be exploited by an unauthenticated attacker on the adjacent network, potentially leading to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.1.2u.6165_20211012CPE matchmatch criteria | cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.6165_20211012:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.