CVE-2024-25468

CVE-2024-25468 affects TOTOLINK X5000R (v9.1.0u.6369_B20230113). The issue is in the NTPSyncWithHost component, where the host_time parameter can be abused by a remote attacker to trigger a denial of service. The available documents describe a high-severity impact (CVSS v3.1 base score 7.5) with ...

The vulnerability of the NTPSyncWithHost function in the cstecgi.cgi microprogramming software for TOTOLINK EX1200L routers allows a hacker to execute arbitrary code.

The vulnerability of the NTPSyncWithHost function in the cstecgi.cgi microprogramming software for TOTOLINK EX1200L routers exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

TOTOLINK A3700R NTPSyncWithHost Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the NTPSyncWithHost method failing to properly filter construct command special characters, commands, and so on. An...

CVE-2023-52027

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

Command injection

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the NTPSyncWithHost method failing to properly filter construct command special characters, commands, and so on. An...

CVE-2023-52027

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

TOTOLINK N200RE NTPSyncWithHost Function OS Command Injection Vulnerability

The TOTOLINK N200RE is a router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N200RE version 9.3.5u.6139B20201216, which stems from a failure to properly filter the hosttime parameter of the NTPSyncWithHost function on the...

CVE-2023-52027

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

PT-2024-14361 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R version 9.1.2u.5822 B20200513 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the NTPSyncWithHost function. Recommendations: For version 9.1.2u.5822 B20200513, conside...

CVE-2023-52027

CVE-2023-52027 affects TOTOLINK A3700R (v9.1.2u.5822_B20200513). The NTPSyncWithHost function allows remote command execution due to insufficient filtering of constructed commands, enabling arbitrary commands to be run by an attacker with network access. Public sources corroborate RCE via NTPSync...

CVE-2024-0296

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

CVE-2024-0296

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

Command injection

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

CVE-2024-0296 Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

CVE-2024-0296

Totolink N200RE v9.3.5u.6139_B20201216 is affected by OS command injection in the NTPSyncWithHost function of /cgi-bin/cstecgi.cgi. The vulnerability stems from improper handling of the host_time parameter, enabling remote command execution. Public exploit/disclosure exists. Affected product: Tot...

TOTOLINK N200RE 操作系统命令注入漏洞

The TOTOLINK N200RE is a router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N200RE version 9.3.5u.6139B20201216, which stems from a failure to properly filter the hosttime parameter of the NTPSyncWithHost function on the...

PT-2024-1061 · Totolink · Totolink N200Re

Name of the Vulnerable Software and Affected Versions: Totolink N200RE version 9.3.5u.6139 B20201216 Description: A critical issue has been identified in the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument host time leads to os command injection. This...

TOTOLINK EX1800T NTPSyncWithHost Interface Command Execution Vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T version v9.1.0cu.2112B20220316. The vulnerability stems from the hosttime parameter of the NTPSyncWithHost interface of cstecgi .cgi failing to...

TOTOLINK EX1200L NTPSyncWithHost Interface Command Execution Vulnerability

TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the NTPSyncWithHost interface of...