Lucene search
+L

195 matches found

Cvelist
Cvelist
added 2025/06/16 8:0 p.m.38 views

CVE-2025-6137 TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow

A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

9CVSS0.00775EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/16 8:0 p.m.35 views

CVE-2025-6137

CVE-2025-6137 affects TOTOLINK T10 4.1.8cu.5207. The vulnerable component is the HTTP POST Request Handler function setWiFiScheduleCfg in /cgi-bin/cstecgi.cgi; manipulating the desc argument leads to a buffer overflow. Remote exploitation is described as possible, and multiple sources note public...

9CVSS7.4AI score0.00775EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/16 8:0 p.m.3 views

CVE-2025-6137 TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow

A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

9CVSS7.4AI score0.00775EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.3 views

TOTOLINK T10 安全漏洞

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a buffer overflow vulnerability, which originates from the parameter desc of the function setWiFiScheduleCfg in the file /cgi-bin/cstecgi.cgi that fails to correctly validate the...

9CVSS8.2AI score0.00775EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.6 views

TOTOLINK T10 安全漏洞

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a trust management issue vulnerability that stems from the use of hard-coded passwords in the file /etc/shadow.sample. An attacker could exploit the vulnerability to cause...

3.9CVSS4.7AI score0.00331EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.3 views

TOTOLINK T10 安全漏洞

TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a buffer overflow vulnerability, which originates from the parameter ssid5g in the function setWizardCfg in the file /cgi-bin/cstecgi.cgi that fails to correctly validate the...

9CVSS8.1AI score0.00779EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/06/13 12:0 a.m.4 views

TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12747)

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 4.1.8cu.5207. The vulnerability affects the UploadCustomModule function in the /cgi-bin/cstecgi.cgi file in the POST request handling component. An attacker could use this...

9CVSS7.4AI score0.04281EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/13 12:0 a.m.3 views

TOTOLINK T10 Buffer Overflow Vulnerability

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207. The vulnerability affects the setUpgradeFW function in the /cgi-bin/cstecgi.cgi file in the POST request processing component. A remote attacker could use...

9CVSS7.5AI score0.04071EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.8 views

The vulnerability of the setWiFiRepeaterCfg() function in the microprogrammed software of the TOTOLink T10 routers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setWiFiRepeaterCfg function in the TOTOLink T10 router’s microprogramming system arises due to buffer overflow when processing the password parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

9CVSS8AI score0.07785EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.7 views

The vulnerability of the UploadCustomModule() function in the TOTOLink T10 router software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UploadCustomModule function in the TOTOLink T10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.04281EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.6 views

The vulnerability of the `setUpgradeFW()` function in the TOTOLink T10 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setUpgradeFW function in TOTOLink T10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

9CVSS7.6AI score0.04071EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2025/06/13 12:0 a.m.2 views

TOTOLINK T10 Buffer Overflow Vulnerability

The TOTOLINK T10 is a wireless router from TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207, which affects the function setWiFiRepeaterCfg in the /cgi-bin/cstecgi.cgi file of the component's POST request handler.An attacker can exploit the vulnerability by...

9CVSS7.5AI score0.07785EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/13 12:0 a.m.7 views

TOTOLINK T10 Buffer Overflow Vulnerability

The TOTOLINK T10 is a dual-band mesh networking router from TOTOLINK for full coverage needs of home and office networks. A buffer overflow vulnerability exists in TOTOLINK T10. The vulnerability stems from incorrect manipulation of the parameter desc in the file /cgi-bin/cstecgi.cgi. An attacker...

9CVSS7.5AI score0.076EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/13 12:0 a.m.2 views

TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12749)

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207, which affects the function setWiFiMeshName in the /cgi-bin/cstecgi.cgi file of the component's POST request handler.An attacker can exploit the vulnerabilit...

9CVSS7.4AI score0.076EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/12 12:18 a.m.7 views

CVE-2025-5905

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack m...

9CVSS8.8AI score0.07785EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/12 12:18 a.m.7 views

CVE-2025-5903

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

9CVSS8.9AI score0.076EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/12 12:18 a.m.7 views

CVE-2025-5904

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument devicename leads to buffer overflow. Th...

9CVSS8.9AI score0.076EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/11 11:16 p.m.4 views

CVE-2025-5902

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiate...

9CVSS8.9AI score0.04071EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/11 11:16 p.m.6 views

CVE-2025-5901

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument File leads to buffer overflow. The attack can...

9CVSS8.9AI score0.04281EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/10 12:15 a.m.15 views

CVE-2025-5903

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

9CVSS0.076EPSS
SaveExploits1References5
Rows per page
Query Builder