CVE-2024-35400

MediumCVSS 5.3

Published: 28/05/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

A stack overflow vulnerability was discovered in TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228. The issue occurs in the SetPortForwardRules function via the desc parameter.

Risk Assessment

An attacker can remotely crash the device or potentially gain control, leading to network security compromise.

Recommendation

Immediately update the firmware to the latest version available from the vendor. If no update is available, restrict management interface access to trusted networks only.

Original NVD description (English source)

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules