168 matches found
CVE-2025-28020
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...
CVE-2025-28018
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...
CVE-2025-28019
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...
CVE-2025-28019
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...
CVE-2025-28017
TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...
CVE-2025-28017
TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...
TOTOLINK A800R 安全漏洞
TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A800R version V4.1.2cu.5137B20200730, which stems from a security issue in the downloadFile.cgi component, and can be exploited by remote attackers to execute arbitrary...
TOTOLINK A800R 安全漏洞
TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A800R suffers from a command injection vulnerability that stems from the QUERYSTRING parameter in downloadFile.cgi failing to correctly filter constructed command special characters, commands, and so on. No...
CVE-2025-28020
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...
CVE-2025-28017
TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...
CVE-2025-28018
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...
CVE-2025-28018
The CVE-2025-28018 entry concerns TOTOLINK A800R firmware version 4.1.2cu.5137_B20200730. The vulnerability is a buffer overflow in the downloadFile.cgi endpoint triggered via the v14 parameter, stemming from improper input validation. Reported impact includes remote code execution or denial of s...
CVE-2025-28019
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...
CVE-2025-28019
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...
PT-2025-17648 · Totolink · Totolink A800R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi component. This issue affects the TOTOLINK A800R router. Recommendations: For version 4.1.2cu.5137 B20200730, as a...
CVE-2025-28017
TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...
PT-2025-17649 · Totolink · Totolink A800R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: A buffer overflow issue was discovered in the downloadFile.cgi endpoint through the v25 parameter. This allows for potential exploitation. Recommendations: For TOTOLINK A800R version...
PT-2025-17647 · Totolink · Totolink A800R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi endpoint through the v14 parameter. This issue allows for potential exploitation. No information is provided about th...
CVE-2025-28018
TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...
CVE-2025-28017
CVE-2025-28017 affects TOTOLINK A800R, version 4.1.2cu.5032_B20200408, with a Command Injection vulnerability in downloadFile.cgi exploitable via QUERY_STRING. Root cause per sources: failure to properly filter constructed command characters in that parameter. Impacts include potential remote com...