Lucene search
+L

895 matches found

Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.12 views

PT-2024-38273 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A critical issue has been found, affecting the Telnet Service component, specifically an unknown part of the file /web cste/cgi-bin/product.ini. The manipulation leads to the use of a...

10CVSS9.6AI score0.20737EPSS
SaveExploits1References9
CNVD
CNVD
added 2024/08/01 12:00 a.m.15 views

TOTOLINK CP450 Hardcoding Vulnerability

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

10CVSS9.4AI score0.20737EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.13 views

TOTOLINK CP450 安全漏洞

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

10CVSS6.8AI score0.20737EPSS
SaveExploits1References5
NVD
NVD
added 2024/07/30 8:15 p.m.31 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS0.00776EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/30 12:00 a.m.70 views

CVE-2024-41611

CVE-2024-41611 affects the D-Link DIR-860L REVA router firmware PATCH 1.10..B04, where the Telnet service contains hardcoded credentials , enabling remote login and execution of arbitrary commands. The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/CNNVD/OpenVAS entries) an...

9.8CVSS7.1AI score0.00776EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/07/30 12:00 a.m.61 views

CVE-2024-41610

Summary: CVE-2024-41610 affects the D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC. The underlying issue is hardcoded credentials in the Telnet service , which enables an attacker to log in remotely and execute arbitrary commands. This is a network-accessible vulnerability with a critically hig...

9.8CVSS7.2AI score0.0085EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/07/30 12:00 a.m.50 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

0.00776EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/30 12:00 a.m.18 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

7.1AI score0.0085EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/30 12:00 a.m.46 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

0.0085EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.9 views

D-Link DIR-820LW 安全漏洞

The D-Link DIR-820LW is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LW REVB FIRMWARE PATCH version 2.03.B01TC, which originates from the inclusion of hardcoded credentials in the Telnet service, allowing an attacker to remotely log...

9.8CVSS7.3AI score0.0085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.9 views

PT-2024-29462 · D Link · Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L REVA FIRMWARE versions 1.10 through 1.10.B04 Description: The issue concerns hardcoded credentials in the Telnet service, allowing remote login and execution of arbitrary commands. Recommendations: For versions 1.10 through...

9.8CVSS9.7AI score0.00776EPSS
SaveExploits0References4
CNVD
CNVD
added 2024/07/29 12:00 a.m.39 views

TOTOLINK A3600R Hardcoded Password Vulnerability

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the Telnet service, which can be exploited by an attacker to cause tampering of the device configuration, disclosure of sensitive...

8.8CVSS6.7AI score0.00559EPSS
SaveExploits1References1
NVD
NVD
added 2024/07/28 3:15 p.m.31 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS0.00559EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/28 3:15 p.m.14 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS5.3AI score0.00559EPSS
SaveExploits1References4
CVE
CVE
added 2024/07/28 2:31 p.m.68 views

CVE-2024-7159

The CVE-2024-7159 entry concerns TOTOLINK A3600R (firmware 4.1.2cu.5182_B20201102) where the Telnet Service processes the file /web_cste/cgi-bin/product.ini in a way that enables use of a hard-coded password. Public disclosures and multiple sources (Red Hat, CNVD, CVE records, PT Security) confir...

8.8CVSS5.5AI score0.00559EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/07/28 2:31 p.m.46 views

CVE-2024-7159 TOTOLINK A3600R Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

5.5CVSS0.00559EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/28 2:31 p.m.18 views

CVE-2024-7159 TOTOLINK A3600R Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

5.5CVSS5.8AI score0.00559EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/28 12:00 a.m.10 views

TOTOLINK A3600R 安全漏洞

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the Telnet service, which can be exploited by an attacker to cause tampering of the device configuration, disclosure of sensitive...

8.8CVSS6.7AI score0.00559EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/28 12:00 a.m.8 views

PT-2024-38121 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue affects the Telnet Service component, specifically the processing of the file /web cste/cgi-bin/product.ini. This manipulation leads to the use of a hard-coded...

8.8CVSS5.7AI score0.00559EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/07/23 12:00 a.m.12 views

PT-2024-5386 · Totolink · Totolink Cp900L

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900 version 6.3c.566 Description: A critical issue has been found in the Telnet Service component, specifically affecting the setTelnetCfg function. The manipulation of the telnet enabled argument leads to command injection. This...

9.8CVSS7.6AI score0.19907EPSS
SaveExploits1References8
Rows per page
Query Builder