Lucene search
+L

226 matches found

CNVD
CNVD
added 2025/02/24 12:00 a.m.9 views

TOTOLINK X5000R vif_disable Command Injection Vulnerability

The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the vifdisable function, no details of the vulnerability are provided at this time...

6.5CVSS6.9AI score0.00775EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/21 12:00 a.m.8 views

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the vifdisable function, no details of the vulnerability are provided at this time...

6.5CVSS7.6AI score0.00775EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/02/19 12:00 a.m.33 views

TOTOLINK X18 Buffer Overflow Vulnerability

TOTOLINK X18 is a Gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X18 version 9.1.0cu.2024B20220329, which originates from the parameter String in the file /cgi-bin/cstecgi.cgi that fails to correctly validate the length size of the input...

9CVSS8.2AI score0.16672EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/19 12:00 a.m.38 views

TOTOLINK X18 Command Injection Vulnerability

TOTOLINK X18 is a Gigabit router from China's Gion Electronics TOTOLINK. TOTOLINK X18 version 9.1.0cu.2024B20220329 suffers from a command injection vulnerability that stems from the parameter enable in file /cgi-bin/cstecgi.cgi failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.02519EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.9 views

TOTOLINK X5000R switch parameter command injection vulnerability in the setScheduleCfg function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "switch" parameter in setScheduleCfg to correctly filter for constructor command special...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.13 views

TOTOLINK X5000R setScheduleCfg function's hour parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "hour" parameter in setScheduleCfg failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.23 views

TOTOLINK X5000R setVpnAccountCfg function user parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "user" parameter in setVpnAccountCfg failing to properly filter constructed command special characters, commands, etc. This vulnerability...

8.8CVSS9.5AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.6 views

TOTOLINK X5000R setVpnAccountCfg function pass parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "pass" parameter in setVpnAccountCfg failing to correctly filter constructor special characters, commands,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.47 views

TOTOLINK X5000R sHour Parameter Command Injection Vulnerability in the setWiFiScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sHour" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.16 views

TOTOLINK X5000R setScheduleCfg function week parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "week" parameter in setScheduleCfg to correctly filter for constructed command special...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/27 12:00 a.m.16 views

TOTOLINK多款产品 安全漏洞

TOTOLINK A3002RU and others are products of China's Gion Electronics TOTOLINK.TOTOLINK A3002RU is a wireless router product.TOTOLINK N300RT is a wireless router that complies with the 802.11n standard.TOTOLINK N150RT is a wireless router. A security vulnerability exists in several TOTOLINK...

6.8CVSS7.4AI score0.0379EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/25 12:00 a.m.38 views

TOTOLINK EX200 ssd Parameter Command Injection Vulnerability

TOTOLINK EX200 is a 2.4G wireless N range extender from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK EX200 ssd parameter handling, which can be exploited by remote attackers to submit a special request that can be used to execute arbitrary commands in the...

6.3CVSS7.8AI score0.17784EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/11/21 12:00 a.m.12 views

Unspecified vulnerability in TOTOLINK A600UB

The TOTOLINK A600UB is a Bluetooth wireless adapter from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A600UB that originates in the WifiAutoInstallDriver.exe and MSASN1.dll components that execute arbitrary code. An attacker can exploit the vulnerability to...

7.8CVSS7AI score0.00184EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/11/13 12:00 a.m.13 views

TOTOLINK X18 Command Injection Vulnerability

TOTOLINK X18 is a mesh router system from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X18 version 9.1.0cu.2024B20220329, which stems from the enable parameter in the /cgi-bin/cstecgi.cgi page failing to correctly filter constructed command special...

8.8CVSS7.4AI score0.03235EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/11/05 12:00 a.m.49 views

TOTOLINK LR350 License Issue Vulnerability

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from an authorization issue vulnerability that stems from an input value of 1 for the parameter authCode in /formLoginAuth.htm, which can lead to authorization bypass. No detailed vulnerability...

9.1CVSS5.2AI score0.01554EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/09/23 12:00 a.m.9 views

TOTOLINK T10 Command Injection Vulnerability

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a command injection vulnerability that stems from the parameter command in the file /cgi-bin/cstecgi.cgi that can lead to operating system command injection. No details of the...

8.8CVSS6.7AI score0.03321EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/09/20 12:00 a.m.17 views

TOTOLINK AC1200 T8 setWiFiAclRules function buffer overflow vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 setWiFiAclRules function. The vulnerability stems from the desc parameter of the setWiFiAclRules function failing to correctly validat...

9.8CVSS8.1AI score0.01247EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/30 12:00 a.m.5 views

TOTOLINK AC1200 Buffer Overflow Vulnerability

TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the formWlEncrypt CGI handler in the boa program that fails to limit the length of the wlanssid field entered by the user. An...

9.8CVSS6.8AI score0.00662EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/29 12:00 a.m.11 views

TOTOLINK AC1200 T8 Buffer Overflow Vulnerability (CNVD-2025-08338)

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from a buffer overflow vulnerability that stems from the setTracerouteCfg method failing to properly validate the length and size of the input data, which can be...

9.8CVSS8.2AI score0.01043EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/29 12:00 a.m.35 views

TOTOLINK AC1200 T8 OS Command Injection Vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from an operating system command injection vulnerability that stems from the setDiagnosisCfg method failing to properly filter constructed command special characters,...

9.8CVSS7.3AI score0.019EPSS
SaveExploits0References1
Rows per page
Query Builder