CVE-2022-29646

An access control issue in TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 allows attackers to obtain sensitive information via a crafted web request...

CVE-2022-29646

CVE-2022-29646 affects TotoLink A3100R routers (versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The public docs describe an access-control flaw that allows attackers to obtain sensitive information via a crafted web request, i.e., a remote, network-based impact with low attack comp...

CVE-2022-29645

The CVE-2022-29645 entry concerns TOTOLINK A3100R devices. Connected sources confirm the affected models: V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129. The underlying issue is a hard coded root password stored in the component /etc/shadow.sample, enabling unauthorized root access. CVSS dat...

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29644

CVE-2022-29644 affects TOTOLINK A3100R devices (firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The issue is a hard-coded password for the Telnet service stored in the component /web_cste/cgi-bin/product.ini, creating an unauthenticated control risk over the device. The NV...

CVE-2022-29643

CVE-2022-29643 affects TOTOLINK A3100R routers. The issue is a stack overflow in setMacQos via the macAddress parameter , present in firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 . This vulnerability enables a Denial of Service (DoS) by sending a crafted POST request. Conn...

CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29642

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29642

CVE-2022-29642 affects TOTOLINK A3100R devices (firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The root cause is a stack overflow in the setUrlFilterRules function triggered by a crafted POST request to the urlFilterRules parameter, enabling an attacker to cause a Denial ...

CVE-2022-29641

CVE-2022-29641 affects TOTOLINK A3100R: versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129. A stack/buffer overflow occurs in the setParentalRules function when processing startTime and endTime, which can be triggered by a crafted POST request to cause a Denial of Service (DoS). The vul...

CVE-2022-29641

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29640

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29640

The CVE-2022-29640 entry affects TOTOLINK A3100R devices (versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The underlying issue is a stack overflow in the setPortForwardRules function triggered via the comment parameter, leading to Denial of Service when a crafted POST request is se...

CVE-2022-29638

TOTOLINK A3100R devices (versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129) are affected by a stack overflow in the setIpQosRules function triggered via the comment parameter, leading to a Denial of Service through a crafted POST request. The vulnerability description across CVE record...

CVE-2022-29639

TOTOLINK A3100R firmware versions V4.1.2cu.5050_B20200504 through V4.1.2cu.5247_B20211129 are affected by a command injection vulnerability. The issue arises via the magicid parameter in the uci_cloudupdate_config function, allowing arbitrary command execution. Exploitation context and in-the-wil...

CVE-2022-29639

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function ucicloudupdateconfig...

CVE-2022-29638

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

TOTOLINK A3100R 缓冲区错误漏洞

TOTOLINK A3100R is a series of wireless routers from China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in the TOTOLINK A3100R setParentalRules function, which can be exploited by attackers to cause a denial of service DoS via a crafted POST request...

TOTOLINK A3100R 缓冲区错误漏洞

TOTOLINK A3100R is a series of wireless routers from China Gion Electronics TOTOLINK.TOTOLINK A3100R setportforwarrules function has a buffer overflow vulnerabilityThe vulnerability can be exploited by an attacker to cause a denial of service DoS via a crafted POST request...