CVE-2022-41518

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi...

Command injection

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi...

CVE-2022-41518

TOTOLINK NR1800X firmware 9.1.0u.6279_B20210910 is affected by CVE-2022-41518 due to a command injection in the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi. The issue originates from inadequate input filtering of the FileName parameter, enabling arbitrary command execution. CVSS 3.1 base ...

CVE-2022-41525: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi...

CVE-2022-41518: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi...

TOTOLINK T6 sub_421504 Function Command Injection Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421504 function in cstecgi.cgi failing to properly filter construct command...

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

Command injection

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

Buffer overflow

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

Command injection

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38826

The CVE-2022-38826 issue affects TOTOLINK T6, specifically version 4.1.5cu.709_B20210518, in the cstecgi.cgi endpoint. The root cause is inadequate filtering of constructed command characters in cstecgi.cgi (sub_421504), enabling arbitrary command execution. Impact is high: remote attacker could ...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 (v4.1.5cu.709_B20210518) is affected by a Buffer Overflow in the cstecgi.cgi endpoint. The issue is described across multiple sources as a vulnerability in TOTOLINK T6 that could enable a high-impact, network-based exploit (CVSS v3.1: CRITICAL, A:H; I:H; C:H). Root cause stated as a b...

CVE-2022-38828

CVE-2022-38828 affects TOTOLINK T6 (version 4.1.5cu.709_B20210518). The vulnerability is a command-injection in the cstecgi.cgi endpoint, enabling arbitrary command execution. CVSSv3.1 base score 9.8 (CRITICAL) with network exposure, no privileges, no user interaction required. Public sources in ...