82 matches found
CVE-2024-57015
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg...
CVE-2024-57013
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg...
PT-2025-3378
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version V9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the week parameter in the setScheduleCfg function. Recommendations For TOTOLINK...
CVE-2024-57011
CVE-2024-57011 affects the TOTOLINK X5000R router (firmware v9.1.0cu.2350_B20230313). The vulnerability is an OS command injection in the minute parameter of the setScheduleCfg function, allowing an attacker to execute arbitrary commands on the device. Connected documents consistently describe th...
CVE-2024-57011: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg...
PT-2025-3381
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version V9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the hour parameter in the setScheduleCfg function. Recommendations For TOTOLINK...
PT-2025-3377
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the minute parameters in the setScheduleCfg function. Recommendations For TOTOLIN...
TOTOLINK X5000R 安全漏洞
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "recHour" parameter in setScheduleCfg failing to correctly filter for constructor special characters,...
TOTOLINK X5000R 安全漏洞
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "switch" parameter in setScheduleCfg to correctly filter for constructor command special...
PT-2025-3380
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the recHour parameter in the setScheduleCfg function. Recommendations For TOTOLIN...
CVE-2024-57013: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg...
CVE-2024-57015: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg...
CVE-2024-57014: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...
CVE-2024-57012: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg...
CVE-2024-57014
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...
CVE-2024-23061
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function...
CVE-2024-23061
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function...
Command injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function...