[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGwlIL63hd_tw6YbJ1GCnJS1W5th0jdYCVL2PdyqylOM":3,"g5a-risk:CVE-2024-0999":137},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":28,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":63,"references":64,"referencesCount":84,"weaknesses":85,"weaknessesCount":93,"isActivelyExploited":48,"cisaInfo":28,"otxData":28,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":133,"notableEvents":134},"CVE-2024-0999","What is CVE-2024-0999?","A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file \u002Fcgi-bin\u002Fcstecgi.cgi. The manipulation of the argument eTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252268. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRule...","2024-01-29T13:15:08.753","2026-06-17T06:54:44.113",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":36,"CVSSMetricV2":37,"CVSSMetricV40":49},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"cna@vuldb.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":24,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",7.2,null,1.2,5.9,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":35,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},2.8,[],[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":24,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":48,"ObtainAllPrivilege":48,"ObtainUserPrivilege":48,"ObtainOtherPrivilege":48,"UserInteractionRequired":48},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":23,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":45,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:L\u002FAu:M\u002FC:C\u002FI:C\u002FA:C","MULTIPLE","COMPLETE",8.3,"",6.4,10,false,[],0.01485,[50,50,50,50,50,50,50],"High",[54,59],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"totolink","n200re_firmware","9.3.5u.6139_b20201216","cpe:2.3:o:totolink:n200re_firmware:9.3.5u.6139_b20201216:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":61,"criteria":62,"vulnerable":48},"n200re","-","cpe:2.3:h:totolink:n200re:-:*:*:*:*:*:*:*",2,[65,71,75,78,80,82],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fjylsec.notion.site\u002FTOTOLINK-N200RE-has-stack-buffer-overflow-vulnerability-in-setParentalRules-f891c062b86349a596ee173cb456b4f6?pvs=4","Notion",[69,70],"Exploit","Third Party Advisory",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fvuldb.com\u002F?ctiid.252268","Vuldb",[70],{"url":76,"source":73,"tags":77},"https:\u002F\u002Fvuldb.com\u002F?id.252268",[70],{"url":66,"source":67,"tags":79},[69,70],{"url":72,"source":73,"tags":81},[70],{"url":76,"source":73,"tags":83},[70],6,[86],{"id":87,"name":88,"description":89,"extendedDescription":45,"status":90,"abstraction":91,"structure":92},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","Draft","Variant","Simple",1,[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2024-0999? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-0999, a high severity cyber security vulnerability from 2024. A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20...","CVE-2024-0999, CVE-2024-0999 vulnerability, CVE-2024-0999 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, totolink security, n200re_firmware vulnerability, n200re vulnerability","\u002Fwhat-is\u002Fcve-2024-0999",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-0999","Cybersecurity","CVE-2024-0999, CVE-2024-0999 vulnerability, CVE-2024-0999 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121],{"Operator":122,"Negate":28,"Nodes":123},"AND",[124,129],{"Operator":125,"Negate":48,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"053F2B0B-9AD2-404B-9135-080AF3D3FC20",{"Operator":125,"Negate":48,"CPEMatch":130},[131],{"Vulnerable":48,"Criteria":62,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9FF7FF59-DB13-4FEA-A81C-124048BF1676",[],[],{"lastModified":11,"cacheTime":136,"version":40},1792356436160,{"score":138,"band":139,"action":140,"scoredAt":141},53,"Medium","Plan remediation","2026-10-16T07:00:36.144413+00:00"]