Lucene search
+L

136 matches found

CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•19 views

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from an operating system command...

9.8CVSS7.5AI score0.04909EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•14 views

PT-2024-1060 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: A critical vulnerability exists in the setOpModeCfg function of the /cgi-bin/cstecgi.cgi file due to the lack of neutralization of special elements. This allows a remote attacker to...

10CVSS7.2AI score0.04909EPSS
SaveExploits1References8
CNVD
CNVD
•added 2024/01/03 12:00 a.m.•22 views

TOTOLINK EX1200L setOpModeCfg Interface Command Execution Vulnerability

TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the setOpModeCfg interface of...

9.8CVSS7.4AI score0.01049EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/22 7:15 p.m.•13 views

CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface...

9.8CVSS6AI score0.01049EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/22 7:15 p.m.•25 views

CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface...

9.8CVSS0.01049EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/22 12:00 a.m.•2 views

CVE-2023-51033: Improper Neutralization of Special Elements used in an OS Command

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface...

9.8CVSS8.4AI score0.01049EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/22 12:00 a.m.•41 views

CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface...

9.8AI score0.01049EPSS
SaveExploits1References1
CVE
CVE
•added 2023/12/22 12:00 a.m.•65 views

CVE-2023-51033

CVE-2023-51033 affects TOTOLINK EX1200L (v9.3.5u.6146_B20201023). The vulnerability is an arbitrary command execution via the cstecgi.cgi interface, specifically the setOpModeCfg function. Red Hat and CNVD entries corroborate that the issue stems from inadequate input handling in the setOpModeCfg...

9.8CVSS9.5AI score0.01049EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2023/12/13 12:00 a.m.•11 views

TOTOLINK A7000R setOpModeCfg Stack Buffer Overflow Vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability that originates from setOpModeCfg failing to properly validate the...

9.8CVSS8.2AI score0.00868EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/11 2:15 p.m.•36 views

CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

9.8CVSS0.00868EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/11 2:15 p.m.•21 views

Stack overflow

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

7.5CVSS7.7AI score0.00868EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/12/11 12:00 a.m.•18 views

TOTOLINK A7000R 安全漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability that originates from setOpModeCfg failing to properly validate the...

9.8CVSS8.1AI score0.00868EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/11 12:00 a.m.•50 views

CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

9.8AI score0.00868EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/12/11 12:00 a.m.•12 views

CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

7.4AI score0.00868EPSS
SaveExploits1References1
CVE
CVE
•added 2023/12/11 12:00 a.m.•67 views

CVE-2023-49417

The CVE-2023-49417 entry concerns TOTOLink A7000R, version 9.1.0u.6115_B20201022, with a stack/stack buffer overflow in the setOpModeCfg function. Multiple connected sources describe a vulnerability where input length is not properly validated, enabling an attacker to potentially execute arbitrar...

9.8CVSS9.5AI score0.00868EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/11 12:00 a.m.•3 views

CVE-2023-49417: Out-of-bounds Write

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

9.8CVSS8.2AI score0.00868EPSS
SaveExploits1References3
CNVD
CNVD
•added 2023/07/11 12:00 a.m.•11 views

TOTOLINK LR350 setOpModeCfg function injection vulnerability

TOTOLINK LR350 is a wireless router produced by TOTOLINK Corporation. The TOTOLINK LR350 has a command injection vulnerability, which stems from the hostname parameter in the setOpModeCfg function not properly filtering special characters and commands. No detailed details about the vulnerability...

9.8CVSS7.2AI score0.01958EPSS
SaveExploits1
attackerkb
attackerkb
•added 2023/07/07 2:15 p.m.•7 views

CVE-2023-37145

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

9.8CVSS7.4AI score0.01958EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/07 2:15 p.m.•34 views

CVE-2023-37145

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

9.8CVSS9.8AI score0.01958EPSS
SaveExploits1References1
Prion
Prion
•added 2023/07/07 2:15 p.m.•27 views

Command injection

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

7.5CVSS9.8AI score0.01958EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder