CVE-2024-7215

TOTOLINK LR1200 (firmware 9.3.1cu.2832) contains a command injection vulnerability in the NTPSyncWithHost function exposed via /cgi-bin/cstecgi.cgi. The host_time parameter is not properly sanitized, allowing arbitrary command execution. Exploitation may be performed remotely, and public disclosu...

CVE-2024-7214 TOTOLINK LR350 cstecgi.cgi setWanCfg command injection

A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. The attack can be launched remotely. T...

CVE-2024-7214 TOTOLINK LR350 cstecgi.cgi setWanCfg command injection

A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. The attack can be launched remotely. T...

CVE-2024-7213 TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268B20220504. Affected is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit h...

CVE-2024-7212

A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268B20220504. This issue affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack may be initiated remotely. The...

CVE-2024-7212 TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268B20220504. This issue affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack may be initiated remotely. The...

CVE-2024-7212 TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268B20220504. This issue affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack may be initiated remotely. The...

CVE-2024-7212: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268B20220504. This issue affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack may be initiated remotely. The...

PT-2024-38175

Name of the Vulnerable Software and Affected Versions TOTOLINK LR1200 version 9.3.1cu.2832 Description A critical issue was found in the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument host time leads to command injection. The attack may be launched...

CVE-2024-7213: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268B20220504. Affected is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit h...

PT-2024-38174

Name of the Vulnerable Software and Affected Versions TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description A critical issue has been found, affecting the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. This issue can b...

CVE-2024-7214: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369B20220309 and classified as critical. Affected by this vulnerability is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. The attack can be launched remotely. T...

CVE-2024-7215: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832 and classified as critical. Affected by this issue is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to command injection. The attack may be launched remotely. The exploit has...

CVE-2024-7187 TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-7187 TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-7185

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102 and classified as critical. Affected by this issue is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument webWlanIdx leads to buffer overflow. The attack may be launched remotely. The...

CVE-2024-7186 TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been classified as critical. This affects the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument comment leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2024-7186 TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been classified as critical. This affects the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument comment leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2024-7185 TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102 and classified as critical. Affected by this issue is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument webWlanIdx leads to buffer overflow. The attack may be launched remotely. The...

CVE-2024-7185 TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102 and classified as critical. Affected by this issue is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument webWlanIdx leads to buffer overflow. The attack may be launched remotely. The...