836 matches found
CVE-2023-51023
CVE-2023-51023 affects TOTOLINK EX1800T (v9.1.0cu.2112_B20220316) with the NTPSyncWithHost interface’s cstecgi.cgi. The root cause is failure to properly filter constructed command characters in the host_time parameter, enabling arbitrary command execution on the device. Impact is consistent with...
CVE-2023-51021
CVE-2023-51021 affects TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316). The vulnerability is an unauthorized arbitrary command execution in the merge parameter of the setRptWizardCfg interface of the cstecgi.cgi, caused by insufficient input filtering of constructed commands. Impact is high (pe...
CVE-2023-51026
The CVE-2023-51026 entry affects TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316). The vulnerability is an unauthenticated, arbitrary command execution in the hour parameter of the setRebootScheCfg interface of the cstecgi .cgi, caused by improper input handling/filtering. Public sources consist...
CVE-2023-51019
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...
CVE-2023-51027
TOTOlink EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...
TOTOLINK EX1800T 安全漏洞
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T. The vulnerability stems from the failure of the langFlag parameter of the cstecgi .cgi's setLanguageCfg interface to properly filter constructed...
CVE-2023-51012
TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316) is vulnerable to unauthorized arbitrary command execution via the lanGateway parameter in the setLanConfig interface of cstecgi.cgi. Root cause: improper handling of the lanGateway input enables arbitrary command execution. Documented impact is hi...
CVE-2023-51016
CVE-2023-51016 applies to TOTOLINK EX1800T v9.1.0cu.2112_B20220316, where the setRebootScheCfg interface in cstecgi.cgi permits unauthorized arbitrary command execution. Affected component/function: setRebootScheCfg in cstecgi.cgi; root cause is an exploitable command execution pathway. Reported ...
CVE-2023-51018
CVE-2023-51018 affects TOTOLINK EX1800T, version 9.1.0cu.2112_B20220316, where the opmode parameter of the setWiFiApConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause cited across sources is inadequate input filtering for constructed commands in opmode, en...
CVE-2023-50147
The CVE-2023-50147 entry concerns the TOTOLINK A3700R router, firmware version V9.1.2u.5822_B20200513, with a vulnerability in the setDiagnosisCfg function of the cstecgi.cgi. The issue enables arbitrary command execution, as described across multiple sources. Affected component: cstecgi.cgi’s se...
CVE-2023-51019
CVE-2023-51019 affects TOTOLINK EX1800T, specifically version 9.1.0cu.2112_B20220316, where the key5g parameter of the setWiFiExtenderConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause described as improper filtering of constructed command characters in th...
CVE-2023-51023
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to arbitrary command execution in the ‘hosttime’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi...
CVE-2023-51014
CVE-2023-51014 affects TOTOLINK EX1800T with version 9.1.0cu.2112_B20220316. The vulnerability is an unauthorized arbitrary command execution via the lanSecDns parameter in the setLanConfig interface of cstecgi.cgi. The connected documents do not provide patch details or official remediation timi...
CVE-2023-51013
CVE-2023-51013 affects TOTOLINK EX1800T (v9.1.0cu.2112_B20220316). The vulnerability is an unauthorized arbitrary command execution via the lanNetmask parameter of the setLanConfig interface in cstecgi.cgi. Exploitation status is not detailed in the provided sources. Impact is described as arbitr...
CVE-2023-6906
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer...
CVE-2023-6612
A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...
PT-2023-7584 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: Totolink X5000R version 9.1.0cu.2300 B20230112 Description: A critical issue affects the function...
PT-2023-30066 · Zioncom (Hong Kong) Technology Limited · A7000R
Name of the Vulnerable Software and Affected Versions: ZIONCOM Hong Kong Technology Limited A7000R version 4.1cu.4154 Description: An issue allows an attacker to execute arbitrary code via the "cig-bin/cstecgi.cgi" endpoint to the setPasswordCfg function. Recommendations: For version 4.1cu.4154,...
ZIONCOM Technology A7000R Security Vulnerability
The ZIONCOM Technology A7000R is a network device from ZIONCOM Technology China. A security vulnerability exists in the ZIONCOM Technology A7000R version v.4.1cu.4154 that originates from a vulnerability that allows an attacker to execute arbitrary code via cig-bin/cstecgi.cgi to the...
