The vulnerability of the /cgi-bin/cstecgi.cgi file of the Totolink N350RT router’s microprogramming system, which allows a hacker to disclose protected information.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the Totolink N350RT router’s microprogramming system is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

TOTOLINK N200RE main function buffer overflow vulnerability

The TOTOLINK N200RE is a wireless router for the SOHO market. The TOTOLINK N200RE suffers from a buffer overflow vulnerability that originates from a stack-based buffer overflow in the main function of //cgi-bin/cstecgi.cgi. No detailed vulnerability details are provided at this time...

TOTOLINK A3300R Security Breach

The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which is caused by a command injection vulnerability in the enable parameter of the setWiFiScheduleCfg method...

CVE-2024-1003

A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched...

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC10U setSmartPowerManagement function, which is caused by a failure of the setSmartPowerManagement function to properly boundary check. An attacker can exploit this vulnerability to cause...

Motorola MR2600 Command Injection Vulnerability

The Motorola MR2600 is a wireless router from Motorola, Inc. A security vulnerability exists in the Motorola MR2600 due to a command injection vulnerability in the "SaveSysLogParams" parameter...

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda AC10U formSetDeviceName function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

D-Link DIR-882 sub_477AA0 Function Stack Buffer Overflow Vulnerability

The D-Link DIR-882 is a home wireless router that supports the latest IEEE802.11acWAVE2 wireless technology. The D-Link DIR-882 suffers from a stack buffer overflow vulnerability that stems from a buffer overflow issue in the sub477AA0 function. No detailed vulnerability details are provided at...

TOTOLINK T8 Information Disclosure Vulnerability

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics TOTOLINK. TOTOLINK T8 suffers from an information disclosure vulnerability, which originates from the parameter ssid/key in the file /cgi-bin/cstecgi.cgi is not sufficiently protected for sensitive information, and can be...

The vulnerability of Synology RT6600ax router microprogramming software arises from insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of Synology RT6600ax router microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the setDiagnosisCfg function in the /cgi-bin/cstecgi.cgi file of the Totolink LR1200GB router’s microprogramming system allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the setDiagnosisCfg function in the /cgi-bin/cstecgi.cgi file of the Totolink LR1200GB router’s microprogramming system is related to the issue of the operation exceeding the buffer limits in memory when processing the ip parameter. Exploiting this vulnerability allows an...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that stems from the setParentalRules method failing to properly validate the length size of input data, which can be exploited by an attacker to execut...

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-822 router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-822 router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of the HNAP1 interface in D-Link DIR-822 microprogrammed router software allows a hacker to gain access to administrator accounts with empty passwords.

The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...

Jensen of Scandinavia Eagle 1200AC Security Vulnerability

Jensen of Scandinavia Eagle 1200AC is a router from Jensen. A security vulnerability exists in the Jensen Eagle 1200AC version V15.03.06.33en. An attacker can exploit this vulnerability to execute arbitrary commands by manipulating mac parameters...

The vulnerability of the microprogrammed software of the BUFFALO VR-S1000 routers, related to the use of pre-installed user credentials, allows a intruder to obtain access to the password of any user.

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the use of pre-set login credentials. Exploiting this vulnerability could allow a hacker to gain access to the password of any user...

The vulnerability of the popen.cgi (/www/cgi-bin/popen.cgi) implementation of the HWL-2511-SS industrial router’s software allows a perpetrator to execute arbitrary commands.

The vulnerability of the popen.cgi /www/cgi-bin/popen.cgi implementation of the HWL-2511-SS industrial router software is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from a stack buffer overflow...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from a stack buffer overflow...

The vulnerability of the UploadFirmwareFile function (/cgi-bin/cstecgi.cgi) in the Totolink LR1200GB router software allows a hacker to execute arbitrary code.

The vulnerability of the UploadFirmwareFile function /cgi-bin/cstecgi.cgi in the Totolink LR1200GB router microprogramming system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...