CVE-2023-51027

TOTOlink EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...

CVE-2023-51019

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...

CVE-2023-51019

CVE-2023-51019 affects TOTOLINK EX1800T, specifically version 9.1.0cu.2112_B20220316, where the key5g parameter of the setWiFiExtenderConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause described as improper filtering of constructed command characters in th...

CVE-2023-51018

CVE-2023-51018 affects TOTOLINK EX1800T, version 9.1.0cu.2112_B20220316, where the opmode parameter of the setWiFiApConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause cited across sources is inadequate input filtering for constructed commands in opmode, en...

CVE-2023-50147

The CVE-2023-50147 entry concerns the TOTOLINK A3700R router, firmware version V9.1.2u.5822_B20200513, with a vulnerability in the setDiagnosisCfg function of the cstecgi.cgi. The issue enables arbitrary command execution, as described across multiple sources. Affected component: cstecgi.cgi’s se...

CVE-2023-51012

TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316) is vulnerable to unauthorized arbitrary command execution via the lanGateway parameter in the setLanConfig interface of cstecgi.cgi. Root cause: improper handling of the lanGateway input enables arbitrary command execution. Documented impact is hi...

CVE-2023-51016

CVE-2023-51016 applies to TOTOLINK EX1800T v9.1.0cu.2112_B20220316, where the setRebootScheCfg interface in cstecgi.cgi permits unauthorized arbitrary command execution. Affected component/function: setRebootScheCfg in cstecgi.cgi; root cause is an exploitable command execution pathway. Reported ...

CVE-2023-51023

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to arbitrary command execution in the ‘hosttime’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi...

CVE-2023-51013

CVE-2023-51013 affects TOTOLINK EX1800T (v9.1.0cu.2112_B20220316). The vulnerability is an unauthorized arbitrary command execution via the lanNetmask parameter of the setLanConfig interface in cstecgi.cgi. Exploitation status is not detailed in the provided sources. Impact is described as arbitr...

CVE-2023-51014

CVE-2023-51014 affects TOTOLINK EX1800T with version 9.1.0cu.2112_B20220316. The vulnerability is an unauthorized arbitrary command execution via the lanSecDns parameter in the setLanConfig interface of cstecgi.cgi. The connected documents do not provide patch details or official remediation timi...

CVE-2023-6906

A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer...

CVE-2023-6612

A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...

PT-2023-7584 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: Totolink X5000R version 9.1.0cu.2300 B20230112 Description: A critical issue affects the function...

PT-2023-30066 · Zioncom (Hong Kong) Technology Limited · A7000R

Name of the Vulnerable Software and Affected Versions: ZIONCOM Hong Kong Technology Limited A7000R version 4.1cu.4154 Description: An issue allows an attacker to execute arbitrary code via the "cig-bin/cstecgi.cgi" endpoint to the setPasswordCfg function. Recommendations: For version 4.1cu.4154,...

ZIONCOM Technology A7000R Security Vulnerability

The ZIONCOM Technology A7000R is a network device from ZIONCOM Technology China. A security vulnerability exists in the ZIONCOM Technology A7000R version v.4.1cu.4154 that originates from a vulnerability that allows an attacker to execute arbitrary code via cig-bin/cstecgi.cgi to the...

CVE-2023-31729

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...

TOTOLINK A3300R 命令注入漏洞

The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R v17.0.0cu.557, which originates from a failure of the setddnscfg function of the request /cgi-bin/cstecgi.cgi to correctly filter constructed command...

PT-2023-23439 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 Description: The issue concerns a Command Injection vulnerability. It can be exploited via the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK A3300R version 17.0.0cu.557, as a temporary...

TOTOLINK A7100RU 命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the enabled parameter of cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters, commands, etc., whi...

PT-2022-25912 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: A command injection issue was found via the OpModeCfg function at the "/cgi-bin/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For...