CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Prion•added 2022/11/23 4:15 p.m.•15 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function...

Prion•added 2022/11/23 4:15 p.m.•12 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function...

Prion•added 2022/11/23 4:15 p.m.•22 views

Buffer overflow

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function...

6.5CVSS8.9AI score0.02334EPSS

Prion•added 2022/11/23 4:15 p.m.•20 views

Authentication flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function...

Prion•added 2022/11/23 4:15 p.m.•17 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...

Prion•added 2022/11/23 4:15 p.m.•22 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function...

Prion•added 2022/11/23 4:15 p.m.•16 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function...

CVE•added 2022/11/23 12:0 a.m.•60 views

CVE-2022-44256

CVE-2022-44256 affects Totolink LR350 (v9.3.5u.6369_B20220309). The issue is a post-authentication buffer overflow in the function setLanguageCfg, exploitable via the lang parameter. CVSS v3.1 metrics indicate Network access, Low privileges required, No user interaction, and high impact (C, I, A ...

8.8CVSS8.8AI score0.0211EPSS

Vulnrichment•added 2022/11/23 12:0 a.m.•6 views

CVE-2022-44257

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function...

Vulnrichment•added 2022/11/23 12:0 a.m.•6 views

CVE-2022-44254

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function...

Vulnrichment•added 2022/11/23 12:0 a.m.•3 views

CVE-2022-44256

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function...

Vulnrichment•added 2022/11/23 12:0 a.m.•3 views

CVE-2022-44253

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...

8.9AI score0.0211EPSS

Vulnrichment•added 2022/11/23 12:0 a.m.•8 views

CVE-2022-44258

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function...

7.8AI score0.02334EPSS

Positive Technologies•added 2022/11/23 12:0 a.m.•4 views

PT-2022-27158 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...

8.8CVSS7.4AI score0.0211EPSS

Exploits1References5

CVE•added 2022/11/23 12:0 a.m.•58 views

CVE-2022-44259

CVE-2022-44259 affects TOTOLINK LR350 (firmware version 9.3.5u.6369_B20220309). A post-authentication buffer overflow exists in the setParentalRules function triggered via parameters week, sTime, and eTime, potentially enabling remote code execution. Multiple connected sources confirm the vulnera...

8.8CVSS8.8AI score0.0211EPSS

Vulnrichment•added 2022/11/23 12:0 a.m.•3 views

CVE-2022-44259

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function...