CVE-2022-41526: Out-of-bounds Write

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function...

CVE-2022-37083

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...

Command injection

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...

CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

CVE-2022-36481

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

CVE-2022-36481

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

Stack overflow

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

Stack overflow

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

CVE-2022-37083

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...

CVE-2022-37075

TOTOLink A7000R (version 9.1.0u.6115_B20201022) contains a stack overflow in setDiagnosisCfg() triggered via the ip parameter. Exploitation would be local, with low privileges and no user interaction; impact is high on confidentiality, integrity, and availability per CVSS. No official patch detai...

CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

CVE-2022-36481

TOTOLINK N350RT version 9.3.5u.6139_B20201216 contains a command-injection vulnerability in setDiagnosisCfg reachable via the ip parameter. Root cause: input in the ip parameter is unsafely processed, enabling arbitrary commands with local access (attack vector: LOCAL; impact: CONFIDENTIALITY, IN...

CVE-2022-36466

TOTOLINK A3700R is affected by a stack overflow in the setDiagnosisCfg function triggered via the ip parameter, in firmware version 9.1.2u.6134_B20201202. The vulnerability is documented across multiple sources (NVD, Red Hat advisory, CNNVD, PT-SEC) with a local attack vector and high impact on c...

CVE-2022-36466: Out-of-bounds Write

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

PT-2022-23789 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLink A7000R version 9.1.0u.6115 B20201022 Description: A stack overflow issue was discovered via the ip parameter in the setDiagnosisCfg function. Recommendations: For TOTOLink A7000R version 9.1.0u.6115 B20201022, consider restricting...

CVE-2022-36481: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

CVE-2022-37083: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...

CVE-2022-37075: Out-of-bounds Write

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

TOTOLINK N350RT 操作系统命令注入漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from an ip parameter command injection issue in the setDiagnosisCfg method...