Lucene search
K

6 matches found

CNVD
CNVD
added 2025/10/24 12:0 a.m.4 views

TOTOLINK N600R main function null pointer dereference vulnerability

TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, which supports 2.4GHz and 5GHz dual-band concurrency with a maximum wireless transmission rate of 300Mbps. The TOTOLINK N600R suffers from a null pointer dereference vulnerability, which stems from the presen...

7.5CVSS6.8AI score0.0089EPSS
Exploits1References1
OSV
OSV
added 2022/11/23 4:15 p.m.2 views

CVE-2022-44255

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a pre-authentication buffer overflow in the main function via long post data...

9.8CVSS6AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.2 views

The vulnerability of the “Main” function in the TOTOLink A860R microcontroller software allows a intruder to execute any command they desire.

The vulnerability of the “Main” function in the TOTOLink A860R microcontroller software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the QUERYSTRING parameter...

10CVSS8.2AI score0.05664EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.2 views

The vulnerability of the “Main” function in the microprogramming software of the TOTOLink A810R router allows a intruder to execute arbitrary commands.

The vulnerability of the “Main” function in the microprogramming software for the TOTOLink A810R router is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the QUERYSTRING parameter...

10CVSS8.2AI score0.05664EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.2 views

The vulnerability of the Main function in the microprogrammed software of TOTOLink T10 allows a hacker to execute arbitrary commands.

The vulnerability of the Main function in the microprogrammed routing software TOTOLink T10 is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the QUERYSTRING parameter...

10CVSS8.2AI score0.05664EPSS
Exploits1References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/04/01 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-25079

TOTOLink A810R V4.1.2cu.5182B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS7.5AI score0.05664EPSS
Exploits1References1
Rows per page
Query Builder