110 matches found
CVE-2022-48066
The CVE-2022-48066 entry affects Totolink A830R (firmware version V4.1.2cu.5182) with the vulnerability in the global.so component, enabling authentication bypass via a crafted cookie. Impact is high (authentication bypass with network access, as per cited metrics). Public details in connected so...
CVE-2022-48067
CVE-2022-48067 concerns Totolink A830R router (V4.1.2cu.5182). The connected documents describe an information-disclosure vulnerability that allows an attacker to obtain the router’s root password through a brute-force approach. The CVE is documented with a MEDIUM 5.5 CVSS base score (Impact: Con...
CVE-2022-48066
An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie...
TOTOLINK A830R 信任管理问题漏洞
The TOTOLINK A830R is a dual-band wireless router that supports both 2.4GHz and 5GHz bands with a maximum wireless transfer rate of 1200Mbps, making it suitable for home network coverage needs. The TOTOLINK A830R suffers from an information disclosure vulnerability, which can be exploited by...
TOTOLINK A830R 授权问题漏洞
The TOTOLINK A830R is a dual-band wireless router that supports both 2.4GHz and 5GHz bands with a maximum wireless transfer rate of 1200Mbps, making it suitable for home network coverage needs. An authentication bypass vulnerability exists in the TOTOLINK A830R. The vulnerability stems from its...
CVE-2022-48067
An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack...
CVE-2022-48067
An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack...
CVE-2022-48069
Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter...
CVE-2022-48066
An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie...
CVE-2022-48069
Totolink A830R V4.1.2cu.5182 is affected by CVE-2022-48069: a command injection via QUERY_STRING parameter, allowing network-based exploitation with no user interaction. Reported CVSSv3.1 base score 7.5 (High); impact on confidentiality (High) with no integrity/availability impact. Exploitation a...
The vulnerability of the “Main” function in the microprogramming software of the TOTOLink A830R router allows a intruder to execute arbitrary commands.
The vulnerability of the “Main” function in the TOTOLink A830R microcontroller-based router software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the QUERYSTRING parameter...
CVE-2022-28935
Totolink A830R V5.9c.4729B20191112, Totolink A3100R V4.1.2cu.5050B20200504, Totolink A950RG V4.1.2cu.5161B20200903, Totolink A800R V4.1.2cu.5137B20200730, Totolink A3000RU V5.9c.5185B20201128, Totolink A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability...
Command injection
Totolink A830R V5.9c.4729B20191112, Totolink A3100R V4.1.2cu.5050B20200504, Totolink A950RG V4.1.2cu.5161B20200903, Totolink A800R V4.1.2cu.5137B20200730, Totolink A3000RU V5.9c.5185B20201128, Totolink A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability...
多款TOTOLINK产品命令注入漏洞
TOTOLINK A3100R and others are products of China Gion Electronics TOTOLINK.TOTOLINK A3100R is a series of wireless router.TOTOLINK A800R is a wireless router.TOTOLINK A950RG is a super generation Giga wireless router. TOTOLINK A830R V5.9c.4729B20191112 version, Totolink A3100R...
VulnCheck KEV: CVE-2022-26210
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the...
VulnCheck KEV: CVE-2022-25080
TOTOLink A830R V5.9c.4729B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
CVE-2022-26206
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...
CVE-2022-26209
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the...
CVE-2022-26208
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...
CVE-2022-26206
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...