CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

TOTOLINK X6000R setTracerouteCfg function code execution vulnerability

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...

CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

Code injection

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...

CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

PT-2023-30048 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOlink X6000R version 9.4.0cu.852 B20230719 Description: An issue in the software allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component. This enables the attacker to potentially gai...

CVE-2023-39618

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg interface...

CVE-2023-39618

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg interface...

Remote code execution

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg interface...

CVE-2023-39618

CVE-2023-39618 affects TOTOLINK X5000R with firmware B20210419, exposing a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. The issue enables an attacker to potentially execute arbitrary code with network access, contributing to high impact on confidentiality, integri...

CVE-2023-39618

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg interface...

CVE-2023-39618

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg interface...

PT-2023-27036 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version B20210419 Description: A remote code execution issue was found in the setTracerouteCfg interface, allowing for potential code execution. Recommendations: For TOTOLINK X5000R version B20210419, consider restricting acce...

Command injection

A vulnerability has been found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2023-4411 TOTOLINK EX1200L setTracerouteCfg os command injection

A vulnerability has been found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

PT-2023-4624 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version EN V9.3.5u.6146 B20201023 Description: A critical issue has been found, affecting the setTracerouteCfg function, which can lead to os command injection. This can be exploited remotely. The issue is related to errors i...

TOTOLINK A3300R setTracerouteCfg Method Command Injection Vulnerability

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. A command injection vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the command parameter of the setTracerouteCfg method...