PT-2022-23504 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.532 B20210610 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

TOTOLINK A720R 信任管理问题漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a hard-coded vulnerability that stems from the inclusion of root's hard-coded password in...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

Command injection

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

CVE-2022-36456

Totolink A720R firmware 4.1.5cu.532_B20210610 contains a command-injection flaw in /cstecgi.cgi caused by insufficient sanitization of the username parameter. This yields potential local command execution. The PT-2022-23380 advisory confirms the affected version and recommends restricting access ...

TOTOLINK A720R 操作系统命令注入漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that originates from a command injection issue with the username...

TOTOLINK A720R has multiple stack overflow vulnerabilities

TOTOLINK A720R a WIFI amplifier that works as a router. The TOTOLINK A720R suffers from multiple stack overflow vulnerabilities that can be exploited by an attacker to cause a stack overflow...

TOTOLINK A720R has a hard-coded vulnerability

The TOTOLINK A720R is a wireless router. A hard-coded vulnerability exists in TOTOLINK A720R, which can be exploited by attackers to obtain sensitive information...

TotoLink EX300_v2 and A720R Resource Management Error Vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink A720R is a gigabit dual-band wireless wifi amplifier from TotoLink China.TotoLink EX300v2 and A720R are vulnerable to a resource management error that could be exploited by an attacker to deplete storage space,...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

Input validation

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

CVE-2021-43662 affects TotoLink EX300_v2 (V4.0.3c.140_B20210429) and A720R (V4.1.5cu.470_B20200911). Documents describe a resource management error that could be exploited to deplete storage space, causing a DoS condition. No explicit root cause details or remediation are provided in the connecte...

TotoLink EX300 资源管理错误漏洞

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink A720R is a gigabit dual-band wireless wifi amplifier from TotoLink China.TotoLink EX300v2 and A720R are vulnerable to a resource management error that could be exploited by an attacker to deplete storage space,...

Multiple TOTOLink product command injection vulnerabilities

TOTOLink A3100R is a wireless router. TOTOLink A830R is a wireless dual-band router.TOTOLink A720R is a wireless router. Several TOTOLink products are vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the IpFrom parameter...

TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17121)

TOTOLINK A720R is a wireless router.TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the flag parameter...