Lucene search
+L

253 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/17 12:00 a.m.11 views

The vulnerability of function sub_40662C in the microprogramming software for the TOTOlink EX1800T Wi-Fi range extension allows a intruder to execute arbitrary code.

The vulnerability of the sub40662C function in the TOTOlink EX1800T Wi-Fi extension software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network request containing a specific SSID...

10CVSS6.4AI score0.00716EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2024/12/13 12:00 a.m.26 views

TOTOLINK EX1800T cstecgi.cgi sub_40662C stack overflow vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T cstecgi.cgi sub40662C suffers from a stack overflow vulnerability that originates from the failure of the ssid parameter of the sub40662C function of the /cgi-bin/cstecgi.cgi file to...

9.8CVSS8.2AI score0.00716EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 2:15 a.m.16 views

CVE-2024-12352

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function sub40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00716EPSS
SaveExploits0References5
NVD
NVD
added 2024/12/09 2:15 a.m.43 views

CVE-2024-12352

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function sub40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The...

9.8CVSS0.00716EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/12/09 1:00 a.m.10 views

CVE-2024-12352 TOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function sub40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The...

5.3CVSS7.1AI score0.00716EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/12/09 1:00 a.m.57 views

CVE-2024-12352 TOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function sub40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The...

5.3CVSS0.00716EPSS
SaveExploits0References5
CVE
CVE
added 2024/12/09 1:00 a.m.79 views

CVE-2024-12352

The CVE-2024-12352 entry concerns TOTOLINK EX1800T, version 9.1.0cu.2112_B20220316. It affects the function sub_40662C in /cgi-bin/cstecgi.cgi, where manipulation of the ssid argument triggers a stack-based buffer overflow. This can be exploited remotely and, per multiple sources, the exploit has...

9.8CVSS4.9AI score0.00716EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

TOTOLINK EX1800T 安全漏洞

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T cstecgi.cgi sub40662C suffers from a stack overflow vulnerability that originates from the failure of the ssid parameter of the sub40662C function of the /cgi-bin/cstecgi.cgi file to...

9.8CVSS7.9AI score0.00716EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/08 12:00 a.m.12 views

PT-2024-9535 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description: A problematic issue has been found in the function sub 40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the ssid argument leads to a stack-based buffer overflow. The...

9.8CVSS5AI score0.00716EPSS
SaveExploits0References10
VulnCheck KEV
VulnCheck KEV
added 2024/08/13 12:00 a.m.5 views

VulnCheck KEV: CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges...

9.8CVSS6.1AI score0.03817EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:00 a.m.12 views

The vulnerability of the microprogrammed Wi-Fi range extension software TOTOlink EX1800T arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary code and gain increased privileges.

The vulnerability of the TOTOlink EX1800T Wi-Fi range extender’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and...

10CVSS6AI score0.03817EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/05/08 5:15 p.m.11 views

CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges...

9.8CVSS6AI score0.03817EPSS
SaveExploits1References2
NVD
NVD
added 2024/05/08 5:15 p.m.17 views

CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges...

9.8CVSS6.6AI score0.03817EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/05/08 12:00 a.m.19 views

CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges...

7AI score0.03817EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/08 12:00 a.m.11 views

PT-2024-3339 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of this issue may allow a remote attacker to execute...

10CVSS8.2AI score0.03817EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/05/08 12:00 a.m.9 views

TOTOLINK EX1800T 安全漏洞

TOTOLINK EX1800T is a Wi-Fi range extender from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK EX1800T version V9.1.0cu.2112B20220316, which stems from a security issue in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, which...

9.8CVSS7AI score0.03817EPSS
SaveExploits1References2
CVE
CVE
added 2024/05/08 12:00 a.m.139 views

CVE-2024-34257

TOTOLINK EX1800T is affected by a command injection flaw in the apcliEncrypType parameter (firmware 9.1.0cu.2112_B20220316). The vulnerability allows unauthenticated attackers to execute arbitrary commands and gain device administrator privileges. Root cause: improper handling of the apcliEncrypT...

9.8CVSS6.9AI score0.03817EPSS
SaveIn wildExploits1References2Affected Software1
CNVD
CNVD
added 2024/01/26 12:00 a.m.19 views

TOTOLINK EX1800T Command Execution Vulnerability (CNVD-2024-13795)

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a command execution vulnerability that stems from the telnetenabled parameter of the setTelnetCfg interface failing to correctly filter constructed command special characters,...

9.8CVSS7.7AI score0.01643EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/12 1:15 p.m.30 views

CVE-2023-52026

TOTOlink EX1800T V9.1.0cu.2112B20220316 was discovered to contain a remote command execution RCE vulnerability via the telnetenabled parameter of the setTelnetCfg interface...

9.8CVSS9.7AI score0.01643EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/12 1:15 p.m.11 views

CVE-2023-52026

TOTOlink EX1800T V9.1.0cu.2112B20220316 was discovered to contain a remote command execution RCE vulnerability via the telnetenabled parameter of the setTelnetCfg interface...

9.8CVSS5.9AI score0.01643EPSS
SaveExploits1References1
Rows per page
Query Builder