193 matches found
PT-2024-24223 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7314 B20191204 Description: An attacker can obtain the configuration file without authorization through the "/cgi-bin/ExportSettings.sh" API endpoint. Recommendations: For TOTOLINK EX200 version 4.0.3c.7314...
CVE-2024-31805
TOTOLINK EX200 V4.0.3c.7646B20201211 allows attackers to start the Telnet service without authorization via the telnetenabled parameter in the setTelnetCfg function...
CVE-2024-31814
TOTOLINK EX200 V4.0.3c.7646B20201211 allows attackers to bypass login through the FormLogin function...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A security vulnerability exists in the TOTOLINK EX200, which stems from improper privilege...
CVE-2024-31816
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg...
CVE-2024-31812
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...
CVE-2024-31813
TOTOLINK EX200 V4.0.3c.7646B20201211 does not contain an authentication mechanism by default...
CVE-2024-31809
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the FileName parameter in the setUpgradeFW function...
CVE-2024-31808
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...
CVE-2024-31812
The TOTOLINK EX200 wireless N range extender (specifically version 4.0.3c.7646_B20201211 ) is susceptible to an information disclosure vulnerability. This flaw stems from improper privilege management within the getWiFiExtenderConfig function, which allows an unauthenticated attacker to obtain se...
CVE-2024-31816
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg...
CVE-2024-31813
The TOTOLINK EX200 (version 4.0.3c.7646_B20201211 ) lacks a default authentication mechanism , which may allow unauthorized access to the device's features. As a temporary workaround, users are advised to restrict access to the device's web interface to minimize risk. No newer version containing ...
CVE-2024-31808
The TOTOLINK EX200 wireless N range extender (specifically version 4.0.3c.7646_B20201211 ) is susceptible to a remote code execution (RCE) vulnerability. The root cause is the incorrect processing of the webWlanIdx parameter within the setWebWlanIdx function, which fails to properly filter specia...
CVE-2024-31816
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg...
CVE-2024-31807
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the hostTime parameter in the NTPSyncWithHost function...
CVE-2024-31809
The TOTOLINK EX200 wireless N range extender (version 4.0.3c.7646_B20201211 ) is vulnerable to Remote Code Execution (RCE) due to a flaw in the setUpgradeFW function. The root cause is the improper elimination of special elements during the processing of the FileName parameter, which allows an at...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an authorization issue vulnerability, which can be exploited ...
PT-2024-2866 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: The issue is related to a remote code execution vulnerability in the NTPSyncWithHost function, specifically via the hostTime parameter. This vulnerability is associated with weaknesses...