PT-2022-12381 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.470 B20200911 Description: A stack overflow was discovered in the Form Login function, allowing attackers to cause a Denial of Service DoS via the flag parameter. Recommendations: For TOTOLINK A720R version...

Totolink A720R License Issue Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The Totolink A720R suffers from an authorization issue vulnerability in version V4.1.5cu.470B20200911, which stems from an improper implementation of the form login feature in the software version, and can be...

Totolink A720R Access Control Error Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. A security vulnerability exists in the TOTOLINK A720R that originates from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can exploit the...

Totolink A720R Stack Overflow Vulnerability

Totolink A720R is a wireless router from Taiwan-based Totolink Electronics, Inc. A stack overflow vulnerability exists in Totolink A720R V4.1.5cu.470B20200911, which stems from incorrect data handling by the checkLoginUser function in the software and can be exploited by attackers to cause a deni...

CVE-2021-35325

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to cause a denial of service DOS...

CVE-2021-35326

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows attackers to download the configuration file via sending a crafted HTTP request...

CVE-2021-35327

A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...

CVE-2021-35327

A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...

CVE-2021-35324

A vulnerability in the FormLogin function of TOTOLINK A720R A720RFirmware V4.1.5cu.470B20200911 allows attackers to bypass authentication...

CVE-2021-35325

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to cause a denial of service DOS...

CVE-2021-35327

A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...

CVE-2021-35324

A vulnerability in the FormLogin function of TOTOLINK A720R A720RFirmware V4.1.5cu.470B20200911 allows attackers to bypass authentication...

Stack overflow

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to cause a denial of service DOS...

Cross site request forgery (csrf)

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows attackers to download the configuration file via sending a crafted HTTP request...

CVE-2021-35325

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to cause a denial of service DOS...

CVE-2021-35326

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows attackers to download the configuration file via sending a crafted HTTP request...

Authentication flaw

A vulnerability in the FormLogin function of TOTOLINK A720R A720RFirmware V4.1.5cu.470B20200911 allows attackers to bypass authentication...

Default credentials

A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...

CVE-2021-35325

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to cause a denial of service DOS...

CVE-2021-35325

The CVE-2021-35325 case concerns Totolink A720R firmware v4.1.5cu.470_B20200911, where a stack overflow in the checkLoginUser function due to incorrect data handling enables a network-based denial of service. The impact described is partial availability loss, with higher severity on CVSS 3.1 (7.5...