237 matches found
CVE-2022-28491
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
Command injection
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2022-28491
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2022-28491
The CVE-2022-28491 issue affects TOTOLink outdoor CPE CP900 (V6.3c.566_B20171026). It is a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter, allowing an attacker to execute arbitrary commands through a crafted request. CVSS 3.1 base score is 9.8 (CRITICA...
CVE-2022-28491
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
TOTOLINK CP900 操作系统命令注入漏洞
The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. The TOTOLINK CP900 suffers from an operating system command injection vulnerability that stems from a command injection issue in the hostname parameter of the NTPSyncWithHost function...
The vulnerability of the NTPSyncWithHost function in the microprogramming software for TOTOLINK CA300-PoE allows a hacker to execute any command they desire.
The vulnerability of the NTPSyncWithHost function in the TOTOLINK CA300-PoE router microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the hosttime parameter...
CVE-2023-24138
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
Command injection
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
CVE-2023-24138
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
CVE-2023-24138
The CVE-2023-24138 entry concerns TOTOLINK CA300-PoE with firmware V6.2c.884. The vulnerability is a command injection in NTPSyncWithHost via the host_time parameter affecting the NTPSyncWithHost function. Affected component: host_time handling in that function. Impact as per sources: Confidentia...
CVE-2023-24138
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
CVE-2022-37125
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
CVE-2022-37125
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
Command injection
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
EUVD-2022-39778
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
CVE-2022-37125
CVE-2022-37125 affects D-Link DIR-816 A2, specifically the /goform/NTPSyncWithHost endpoint. The connected documents consistently indicate a command injection vulnerability in the DIR-816 A2_v1.10CNB04.img, enabling arbitrary command execution via that API. The CVE entry lists a high/critical imp...
D-Link DIR-816 命令注入漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which stems from being susceptible to command injection via /goform/NTPSyncWithHost...