CVE-2024-35398

CriticalCVSS 9.8

Published: 28/05/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

45th percentile - higher than 45% of all known CVEs

Summary

A stack overflow vulnerability was discovered in TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228. The issue occurs in the setMacFilterRules function via the desc parameter.

Risk Assessment

An attacker can remotely crash the device or potentially gain control, leading to network security compromise.

Recommendation

Immediately update the TOTOLINK CP900L firmware to the latest available version if a patch is released. Otherwise, restrict management interface access to trusted networks only.

Original NVD description (English source)

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.