Lucene search
+L

193 matches found

CNVD
CNVD
•added 2024/08/01 12:00 a.m.•13 views

TOTOLINK EX200 Buffer Overflow Vulnerability

The TOTOLINK EX200 is a 2.4G wireless N range extender designed to extend the coverage of existing Wi-Fi networks. A buffer overflow vulnerability exists in the TOTOLINK EX200. The vulnerability originates from the file /cgi-bin/cstecgi.cgi?action=save&setting The function getSaveConfig as...

9CVSS8.9AI score0.01157EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/01 12:00 a.m.•14 views

TOTOLINK EX200 安全漏洞

The TOTOLINK EX200 is a 2.4G wireless N range extender designed to extend the coverage of existing Wi-Fi networks. A buffer overflow vulnerability exists in the TOTOLINK EX200. The vulnerability originates from the function loginauth in the /cgi-bin/cstecgi.cgi file, which operates on the paramet...

9CVSS7.3AI score0.0127EPSS
SaveExploits1References5
CNVD
CNVD
•added 2024/08/01 12:00 a.m.•17 views

TOTOLINK EX200 Buffer Overflow Vulnerability

The TOTOLINK EX200 is a 2.4G wireless N range extender designed to extend the coverage of existing Wi-Fi networks. A buffer overflow vulnerability exists in the TOTOLINK EX200. The vulnerability originates from the function loginauth in the /cgi-bin/cstecgi.cgi file, which operates on the paramet...

9CVSS8.8AI score0.0127EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/23 12:00 a.m.•15 views

PT-2024-5479 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A critical issue has been found in the getSaveConfig function of the /cgi-bin/cstecgi.cgi?action=save&setting endpoint, caused by a buffer overflow when handling the http host paramete...

9CVSS8.9AI score0.01157EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/07/23 12:00 a.m.•17 views

PT-2024-5481 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A critical issue was found in the loginauth function of the /cgi-bin/cstecgi.cgi file, caused by a buffer overflow when processing the http host parameter. This allows a remote attacke...

9CVSS9AI score0.0127EPSS
SaveExploits1References9
CNVD
CNVD
•added 2024/05/22 12:00 a.m.•14 views

TOTOLINK EX200 Hardcoded Password Vulnerability

The TOTOLINK EX200 is a 2.4G wireless range extender from China's TOTOLINK. It is designed to extend the coverage of existing Wi-Fi networks and eliminate "blind spots". The TOTOLINK EX200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample file, which can...

9.8CVSS6.4AI score0.00615EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/14 3:25 p.m.•30 views

CVE-2024-31810

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

9.8CVSS7.2AI score0.00615EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•9 views

TOTOLINK EX200 安全漏洞

The TOTOLINK EX200 is a 2.4G wireless range extender from China's TOTOLINK. It is designed to extend the coverage of existing Wi-Fi networks and eliminate "blind spots". The TOTOLINK EX200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample file, which can...

9.8CVSS6.9AI score0.00615EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/13 7:58 p.m.•37 views

CVE-2024-31810

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

7.4AI score0.00615EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/13 7:58 p.m.•82 views

CVE-2024-31810

The TOTOLINK EX200 (a 2.4G wireless range extender) version 4.0.3c.7646_B20201211 is vulnerable to a hardcoded password for the root user. The vulnerability originates from the /etc/shadow.sample file, which an attacker can exploit to gain unauthorized access to the device. To remediate this, it ...

7.5AI score0.00615EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/13 12:00 a.m.•8 views

PT-2024-24219 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A hardcoded password for the root user was found in the /etc/shadow.sample file. Recommendations: For TOTOLINK EX200 version 4.0.3c.7646 B20201211, consider changing the hardcoded...

9.8CVSS6.6AI score0.00615EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2024/04/26 12:00 a.m.•12 views

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a attacker to perform XSS attacks.

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score0.00488EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/04/26 12:00 a.m.•28 views

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a attacker to perform XSS attacks.

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score0.00575EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2024/04/22 12:00 a.m.•11 views

TOTOLINK EX200 setWiFiExtenderConfig method ssid parameter cross-site scripting vulnerability

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A cross-site scripting vulnerability exists in the TOTOLINK EX200, which stems from the...

2.4CVSS6.3AI score0.00488EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/04/22 12:00 a.m.•14 views

TOTOLINK EX200 setWiFiExtenderConfig method key parameter cross-site scripting vulnerability

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...

6.8CVSS6.3AI score0.00575EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/18 5:15 p.m.•16 views

CVE-2024-32325

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...

2.4CVSS5.8AI score0.00488EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/18 5:15 p.m.•38 views

CVE-2024-32325

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...

2.4CVSS5.8AI score0.00488EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/18 5:15 p.m.•16 views

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

6.8CVSS5.8AI score0.00575EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/18 5:15 p.m.•29 views

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

6.8CVSS5.8AI score0.00575EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/18 12:00 a.m.•21 views

PT-2024-3096 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version V4.0.3c.7646 B20201211 Description: The issue exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function of the TOTOLINK EX200 router's firmware. This allows a remote attacker to...

6.8CVSS5.7AI score0.00575EPSS
SaveExploits1References8
Rows per page
Query Builder