PT-2023-31727 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns unauthorized arbitrary command execution. It specifically affects the lanGateway parameter of the setLanConfig interface in the cstecgi.cgi. Recommendations: For...

CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi...

PT-2023-31741 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue allows for unauthorized arbitrary command execution in the hour parameter of the setRebootScheCfg interface of the cstecgi .cgi. This could potentially lead to malicious...

CVE-2023-51028

CVE-2023-51028 affects TOTOLINK EX1800T 9.1.0cu.2112_B20220316. The vulnerability is in the apcliChannel parameter of the setWiFiExtenderConfig interface in cstecgi.cgi, allowing unauthorized arbitrary command execution. CVSSv3.1: Network attack, low complexity, no privileges, no user interaction...

CVE-2023-51035

TOTOLINK EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface...

CVE-2023-51034

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface...

CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface...

PT-2023-31730 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINX EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns arbitrary command execution in the enable parameter of the 'setDmzCfg' interface of the 'cstecgi.cgi'. Recommendations: For TOTOLINX EX1800T version 9.1.0cu.2112...

CVE-2023-51016: Improper Neutralization of Special Elements used in a Command

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi...

TOTOLINK EX1800T 安全漏洞

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setRptWizardCfg interface, which originates from the merge parameter of the cstecgi .cgi's setRptWizardCfg interface that fails to correctly filt...

CVE-2023-51034: Unrestricted Upload of File with Dangerous Type

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface...

PT-2023-31743 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns unauthorized arbitrary command execution. It is related to the apcliChannel parameter of the "setWiFiExtenderConfig" interface in the "cstecgi.cgi"...

CVE-2023-51021: Undefined Security Weakness

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi...

CVE-2023-51033

CVE-2023-51033 affects TOTOLINK EX1200L (v9.3.5u.6146_B20201023). The vulnerability is an arbitrary command execution via the cstecgi.cgi interface, specifically the setOpModeCfg function. Red Hat and CNVD entries corroborate that the issue stems from inadequate input handling in the setOpModeCfg...

PT-2023-31739 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue allows for unauthorized arbitrary command execution in the tz parameter of the setNtpCfg interface of the cstecgi .cgi. This can be exploited through the 'tz' parameter...

PT-2023-31734 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue allows for unauthorized arbitrary command execution. This is possible through the key5g parameter of the "setWiFiExtenderConfig" interface in the "cstecgi.cgi"...

TOTOLINK EX1200L 安全漏洞

TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the setOpModeCfg interface of...

CVE-2023-51028: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK EX1800T 9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi...

CVE-2023-51027: Undefined Security Weakness

TOTOlink EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...

CVE-2023-51018: Improper Control of Generation of Code

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi...