TOTOLINK EX1800T 安全漏洞

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T. The vulnerability stems from the failure of the langFlag parameter of the cstecgi .cgi's setLanguageCfg interface to properly filter constructed...

CVE-2023-50147

The CVE-2023-50147 entry concerns the TOTOLINK A3700R router, firmware version V9.1.2u.5822_B20200513, with a vulnerability in the setDiagnosisCfg function of the cstecgi.cgi. The issue enables arbitrary command execution, as described across multiple sources. Affected component: cstecgi.cgi’s se...

CVE-2023-51014: Improper Neutralization of Special Elements used in a Command

TOTOLINK EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi...

CVE-2023-51012

TOTOLINK EX1800T (version 9.1.0cu.2112_B20220316) is vulnerable to unauthorized arbitrary command execution via the lanGateway parameter in the setLanConfig interface of cstecgi.cgi. Root cause: improper handling of the lanGateway input enables arbitrary command execution. Documented impact is hi...

CVE-2023-51016

CVE-2023-51016 applies to TOTOLINK EX1800T v9.1.0cu.2112_B20220316, where the setRebootScheCfg interface in cstecgi.cgi permits unauthorized arbitrary command execution. Affected component/function: setRebootScheCfg in cstecgi.cgi; root cause is an exploitable command execution pathway. Reported ...

CVE-2023-51018

CVE-2023-51018 affects TOTOLINK EX1800T, version 9.1.0cu.2112_B20220316, where the opmode parameter of the setWiFiApConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause cited across sources is inadequate input filtering for constructed commands in opmode, en...

CVE-2023-51019

CVE-2023-51019 affects TOTOLINK EX1800T, specifically version 9.1.0cu.2112_B20220316, where the key5g parameter of the setWiFiExtenderConfig interface in cstecgi.cgi allows unauthorized arbitrary command execution. Root cause described as improper filtering of constructed command characters in th...

CVE-2023-51026: Improper Control of Generation of Code

TOTOlink EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi...

CVE-2023-51023: Undefined Security Weakness

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to arbitrary command execution in the ‘hosttime’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi...

CVE-2023-51023

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to arbitrary command execution in the ‘hosttime’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi...

CVE-2023-51013

CVE-2023-51013 affects TOTOLINK EX1800T (v9.1.0cu.2112_B20220316). The vulnerability is an unauthorized arbitrary command execution via the lanNetmask parameter of the setLanConfig interface in cstecgi.cgi. Exploitation status is not detailed in the provided sources. Impact is described as arbitr...

CVE-2023-51014

CVE-2023-51014 affects TOTOLINK EX1800T with version 9.1.0cu.2112_B20220316. The vulnerability is an unauthorized arbitrary command execution via the lanSecDns parameter in the setLanConfig interface of cstecgi.cgi. The connected documents do not provide patch details or official remediation timi...

CVE-2023-51013: Undefined Security Weakness

TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi...

CVE-2023-6906

A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer...

CVE-2023-6612

A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...

PT-2023-7584 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: Totolink X5000R version 9.1.0cu.2300 B20230112 Description: A critical issue affects the function...

PT-2023-30066 · Zioncom (Hong Kong) Technology Limited · A7000R

Name of the Vulnerable Software and Affected Versions: ZIONCOM Hong Kong Technology Limited A7000R version 4.1cu.4154 Description: An issue allows an attacker to execute arbitrary code via the "cig-bin/cstecgi.cgi" endpoint to the setPasswordCfg function. Recommendations: For version 4.1cu.4154,...

ZIONCOM Technology A7000R Security Vulnerability

The ZIONCOM Technology A7000R is a network device from ZIONCOM Technology China. A security vulnerability exists in the ZIONCOM Technology A7000R version v.4.1cu.4154 that originates from a vulnerability that allows an attacker to execute arbitrary code via cig-bin/cstecgi.cgi to the...

CVE-2023-31729

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...

PT-2023-23439 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 Description: The issue concerns a Command Injection vulnerability. It can be exploited via the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK A3300R version 17.0.0cu.557, as a temporary...