Lucene search
+L

191 matches found

Cvelist
Cvelist
added 2025/05/05 7:0 a.m.41 views

CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog...

6.9CVSS0.00519EPSS
SaveExploits1References6
CVE
CVE
added 2025/05/05 7:0 a.m.69 views

CVE-2025-4269

CVE-2025-4269 affects TOTOLINK A720R 4.1.5cu.374, specifically the Log Handler’s file /cgi-bin/cstecgi.cgi. Manipulating the topicurl parameter with input values like clearDiagnosisLog/clearSyslog/clearTracerouteLog results in improper access controls, potentially enabling remote exploitation. Mu...

6.9CVSS7AI score0.00519EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/05 7:0 a.m.11 views

CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog...

6.9CVSS7AI score0.00519EPSS
SaveExploits1References6
CVE
CVE
added 2025/05/05 6:31 a.m.63 views

CVE-2025-4268

The CVE-2025-4268 entry applies to TOTOLINK A720R firmware 4.1.5cu.374, where an improper authentication flaw exists in /cgi-bin/cstecgi.cgi. The vulnerability arises from manipulating the topicurl parameter with the value RebootSystem, enabling remote exploitation without authentication. Multipl...

6.9CVSS5.5AI score0.01019EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/05 6:31 a.m.37 views

CVE-2025-4268 TOTOLINK A720R cstecgi.cgi missing authentication

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

6.9CVSS0.01019EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/05 6:31 a.m.8 views

CVE-2025-4268 TOTOLINK A720R cstecgi.cgi missing authentication

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

6.9CVSS7.1AI score0.01019EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.10 views

PT-2025-19350 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the Config Handler component of the TOTOLINK A720R, affecting an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with th...

7.5CVSS5AI score0.10875EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.7 views

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an information disclosure vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

6.9CVSS6.2AI score0.00582EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.6 views

TOTOLINK A720R 安全漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an improper authentication vulnerability that stems from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this...

6.9CVSS7AI score0.01019EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.7 views

PT-2025-19345 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A critical vulnerability has been found in the TOTOLINK A720R, affecting unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input RebootSystem lead...

6.9CVSS5.2AI score0.01019EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.14 views

PT-2025-19370 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the TOTOLINK A720R, affecting an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads to...

6.9CVSS5AI score0.00582EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.8 views

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an Access Control Error vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

7.5CVSS6.5AI score0.10875EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.9 views

PT-2025-19346 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A critical issue affects the Log Handler component of TOTOLINK A720R, specifically the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input...

6.9CVSS6.4AI score0.00519EPSS
SaveExploits1References13
CNVD
CNVD
added 2024/09/18 12:0 a.m.4 views

TOTOLINK A720R exportOvpn OS Command Injection Vulnerability

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

8.1CVSS5.5AI score0.01682EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/15 11:15 a.m.30 views

CVE-2024-8869

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult...

8.1CVSS0.01682EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/15 11:15 a.m.7 views

CVE-2024-8869

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult...

8.1CVSS5.1AI score0.01682EPSS
SaveExploits0References4
CVE
CVE
added 2024/09/15 10:31 a.m.69 views

CVE-2024-8869

CVE-2024-8869 affects TOTOLINK A720R 4.1.5; the vulnerability is in the exportOvpn function and enables OS command injection. The issue can be exploited remotely with high impact on confidentiality, integrity, and availability (per CVSS data), and exploitability is described as difficult with hig...

8.1CVSS6AI score0.01682EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/15 10:31 a.m.14 views

CVE-2024-8869 TOTOLINK A720R exportOvpn os command injection

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult...

5CVSS7.4AI score0.01682EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/09/15 10:31 a.m.43 views

CVE-2024-8869 TOTOLINK A720R exportOvpn os command injection

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult...

5CVSS0.01682EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/15 12:0 a.m.8 views

TOTOLINK A720R 操作系统命令注入漏洞

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

8.1CVSS7.5AI score0.01682EPSS
SaveExploits0References5
Rows per page
Query Builder