Lucene search
+L

379 matches found

Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.13 views

PT-2022-19302 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was discovered via the hosttime function in the "/setting/NTPSyncWithHost" API endpoint. This allows for potential command injection attacks. Recommendations: F...

10CVSS9.6AI score0.02565EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.13 views

PT-2022-19306 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was found via the filename parameter in the "/setting/CloudACMunualUpdate" API endpoint. Recommendations: For TOTOLink N600R version 5.3c.7159 B20190425, avoid...

10CVSS9.6AI score0.02565EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.17 views

TOTOLINK N600R 缓冲区错误漏洞

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the url parameter in the FUN00415bf0 function. An attacker could exploit this...

10CVSS8.9AI score0.01733EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.10 views

TOTOLINK N600R 缓冲区错误漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418f10 function, which can be exploited by attackers ...

10CVSS8.8AI score0.01665EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.21 views

PT-2022-19303 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version V5.3c.7159 B20190425 Description: A command injection issue was discovered via the ipdoamin parameter in the "/setting/setDiagnosisCfg" API endpoint. Recommendations: For TOTOLink N600R version V5.3c.7159 B20190425, as ...

10CVSS9.7AI score0.02565EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.15 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the filename parameter in /setting/setUploadSetting...

10CVSS8.5AI score0.02565EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.17 views

PT-2022-19304 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was found via the webwlanidx parameter in the "/setting/setWebWlanIdx" API endpoint. This allows for potential exploitation. Recommendations: For TOTOLink N600R...

10CVSS9.5AI score0.02565EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.15 views

PT-2022-19308 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version V5.3c.7159 B20190425 Description: A command injection issue was found via the filename parameter in the "/setting/setUploadSetting" API endpoint. This allows for potential command execution. No information is provided...

10CVSS9.6AI score0.02565EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.29 views

PT-2022-19307 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version V5.3c.7159 B20190425 Description: A command injection issue was discovered via the filename parameter in the "/setting/setUpgradeFW" API endpoint. This allows for potential exploitation. Recommendations: For TOTOLink...

10CVSS9.5AI score0.02565EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.16 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based Gion Electronics TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the ipdoamin parameter in /setting/setDiagnosisCfg...

10CVSS8.4AI score0.02565EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.11 views

TOTOLINK N600R 缓冲区错误漏洞

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from the lack of length validation of the apcliKey parameter in the FUN0041bac4 function. An attacker could exploit this...

10CVSS8.9AI score0.01665EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.10 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the lagtype parameter in /setting/setLanguageCfg...

10CVSS8.4AI score0.02877EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.10 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the devicemac parameter in /setting/setDeviceName...

10CVSS8.5AI score0.02565EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/05/07 12:00 a.m.72 views

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53559)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics. TOTOLINK N600R has a command injection vulnerability, which originates from the "Main" function containing command injection, and can be exploited to execute arbitrary commands via the QUERYSTRING parameter...

10CVSS4.6AI score0.02523EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/05 7:15 p.m.6 views

CVE-2022-27411

TOTOLINK N600R v5.3c.5507B20171031 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter in the "Main" function...

10CVSS5.9AI score0.02523EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/05 7:15 p.m.13 views

CVE-2022-27411

TOTOLINK N600R v5.3c.5507B20171031 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter in the "Main" function...

9.8CVSS7.3AI score0.02523EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/05 7:15 p.m.39 views

CVE-2022-27411

TOTOLINK N600R v5.3c.5507B20171031 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter in the "Main" function...

10CVSS0.02523EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/05 7:15 p.m.33 views

Command injection

TOTOLINK N600R v5.3c.5507B20171031 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter in the "Main" function...

10CVSS9.8AI score0.02523EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/05 6:05 p.m.53 views

CVE-2022-27411

TOTOLINK N600R v5.3c.5507B20171031 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter in the "Main" function...

10AI score0.02523EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/05 6:05 p.m.104 views

CVE-2022-27411

TOTOLINK N600R is affected by a command injection vulnerability in the Main function, exploitable via the QUERY_STRING parameter. The issue affects version 5.3c.5507_B20171031 and can allow remote command execution over the network without user interaction. Multiple connected sources corroborate ...

10CVSS9.8AI score0.02523EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder