402 matches found
CVE-2024-37639
TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules...
CVE-2024-37635
TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg...
CVE-2024-37631
TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule...
CVE-2024-42545
TOTOLINK A3700R v9.1.2u.5822B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function...
CVE-2024-42543
TOTOLINK A3700R v9.1.2u.5822B20200513 has a buffer overflow vulnerability in the httphost parameter in the loginauth function...
CVE-2024-7160
A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822B20200513. Affected is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2023-52028
TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setTracerouteCfg function...
CVE-2023-43141
TOTOLINK A3700R V9.1.2u.6134B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control...
CVE-2023-48192
An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...
CVE-2023-46574
An issue in TOTOLINK A3700R v.9.1.2u.616520211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function...
CVE-2022-36459
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...
The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.
The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...
The vulnerability of the setWiFiEasyCfg/setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to escalate their privileges.
The vulnerability of the setWiFiEasyCfg/setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system allows a intruder to cause a service failure.
The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a speciall...
The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router’s microprogramming system allows a attacker to cause a service failure.
The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST...
The vulnerability of the setSmartQosCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to increase their privileges.
The vulnerability of the setSmartQosCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.
The vulnerability of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a specially crafted POST request...
The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.
The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted PO...
The vulnerability of the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to escalate their privileges.
The vulnerability of the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...