782 matches found
Design/Logic Flaw
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function...
Buffer overflow
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function...
Authentication flaw
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function...
Design/Logic Flaw
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function...
PT-2022-27159 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the sPort/ePort parameter in the setIpPortFilterRules function. This allows for potential exploitation after...
PT-2022-27152 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the ip parameter in the setDiagnosisCfg function. This allows for potential exploitation after authentication has bee...
PT-2022-27158 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...
CVE-2022-44254
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function...
CVE-2022-44259
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function...
CVE-2022-44253
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...
CVE-2022-44254
CVE-2022-44254 affects TOTOLINK LR350, specifically firmware version 9.3.5u.6369_B20220309. The vulnerability is a post-authentication buffer overflow in the setSmsCfg function, triggered via the text parameter, which can lead to remote code execution as described in multiple sources. Some docume...
CVE-2022-44260
CVE-2022-44260 affects TOTOLINK LR350 firmware 9.3.5u.6369_B20220309. The issue is a post-authentication buffer overflow in the setIpPortFilterRules function exploited via the sPort/ePort parameters, enabling remote code execution as described in multiple sources. The CVSS vector indicates networ...
CVE-2022-44259
CVE-2022-44259 affects TOTOLINK LR350 (firmware version 9.3.5u.6369_B20220309). A post-authentication buffer overflow exists in the setParentalRules function triggered via parameters week, sTime, and eTime, potentially enabling remote code execution. Multiple connected sources confirm the vulnera...
CVE-2022-44259
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function...
PT-2022-27155 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the lang parameter in the setLanguageCfg function. This allows for potential exploitation after authentication has be...
CVE-2022-44256
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function...
CVE-2022-44256
CVE-2022-44256 affects Totolink LR350 (v9.3.5u.6369_B20220309). The issue is a post-authentication buffer overflow in the function setLanguageCfg, exploitable via the lang parameter. CVSS v3.1 metrics indicate Network access, Low privileges required, No user interaction, and high impact (C, I, A ...
CVE-2022-44258
CVE-2022-44258 affects TOTOLINK LR350 devices (example: V9.3.5u.6369_B20220309). The root cause is a post-authentication buffer overflow in the setTracerouteCfg function triggered by a crafted parameter command. Impact is described as high for confidentiality, integrity, and availability under CV...