ipdecap

ipdecap Decapsulate traffic encapsulated within GRE, IPIP, 6in4 and ESP ipsec protocols, from a pcap file. Can also remove IEEE 802.1Q virtual lan - vlan header. Documentation available at http://loicpefferkorn.net/ipdecap...

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

Command injection

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-27004

Affected devices: Totolink X5000R (v9.1.0u.6118_B20201102) and A7000R (v9.1.0u.6115_B20201022). Root cause: command injection in the Tunnel 6in4 function via the remote6in4 parameter, enabling arbitrary command execution. Impact: high-severity remote code execution with network access and no auth...

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...