Lucene search
+L

12350 matches found

NVD
NVD
added 2026/03/08 1:15 a.m.8 views

CVE-2026-3696

A vulnerability was found in Totolink N300RH 6..1c.1353B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has...

9.8CVSS0.02113EPSS
SaveExploits1References5
OSV
OSV
added 2026/03/08 1:15 a.m.8 views

CVE-2026-3696

A vulnerability was found in Totolink N300RH 6..1c.1353B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.6AI score0.02113EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/08 12:32 a.m.7 views

CVE-2026-3696 Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection

A vulnerability was found in Totolink N300RH 6..1c.1353B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has...

7.5CVSS6.8AI score0.02113EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 12:32 a.m.8 views

CVE-2026-3696

A vulnerability was found in Totolink N300RH 6..1c.1353B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has...

7.5CVSS6.8AI score0.02113EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/03/08 12:32 a.m.48 views

CVE-2026-3696 Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection

A vulnerability was found in Totolink N300RH 6..1c.1353B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has...

7.5CVSS0.02113EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/08 12:32 a.m.22 views

CVE-2026-3696

CVE-2026-3696 affects Totolink N300RH (CGI Handler, /cgi-bin/cstecgi.cgi) where the setWiFiWpsConfig function can be manipulated to trigger OS command injection. Public exploit details indicate remote exploitaton with high impact across confidentiality, integrity, and availability. Affected versi...

9.8CVSS6.8AI score0.02113EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.9 views

PT-2026-23896

Name of the Vulnerable Software and Affected Versions Totolink N300RH versions 6.1.1353 B20190305 Description A flaw exists in the CGI Handler component of Totolink N300RH, specifically within the setWiFiWpsConfig function of the /cgi-bin/cstecgi.cgi file. This allows for operating system command...

9.8CVSS7.1AI score0.02113EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.11 views

TOTOLINK N300RH 操作系统命令注入漏洞

TOTOLINK N300RH is a long-range wireless router produced by TOTOLINK Corporation. The version 6..1c.1353B20190305 of TOTOLINK N300RH has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on the function setWiFiWpsConfig in the...

9.8CVSS7.1AI score0.02113EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2026/03/06 12:0 a.m.9 views

The vulnerability of the setDiagnosisCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system allows a hacker to inject arbitrary command-line parameters.

The vulnerability of the setDiagnosisCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system is related to the insertion or modification of arguments. Exploiting this vulnerability allows a remote attacker to insert arbitrary command-line...

10CVSS6AI score0.00693EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/03/06 12:0 a.m.11 views

The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the TOTOLINK X6000R router software, allowing a attacker to execute arbitrary commands.

The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the X6000R router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

9CVSS6.1AI score0.01755EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/28 7:47 a.m.19 views

CVE-2026-3301

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS6.9AI score0.04028EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/27 6:31 a.m.9 views

EUVD-2026-9003

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS8.4AI score0.04028EPSS
SaveExploits1References6
NVD
NVD
added 2026/02/27 6:18 a.m.13 views

CVE-2026-3301

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS0.04028EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/27 6:18 a.m.8 views

CVE-2026-3301

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

9.8CVSS5.6AI score0.04028EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/27 5:32 a.m.9 views

CVE-2026-3301

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS8.4AI score0.04028EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/02/27 5:32 a.m.45 views

CVE-2026-3301

Totolink N300RH 6.1c.1353_B20190305 Web Management Interface contains a vulnerability in function setWebWlanIdx of /cgi-bin/cstecgi.cgi. Manipulating the webWlanIdx argument triggers an OS command injection, with remote execution possible. Public exploit information exists. Affected component is ...

10CVSS8.3AI score0.04028EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/27 5:32 a.m.45 views

CVE-2026-3301 Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS0.04028EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/27 5:32 a.m.7 views

CVE-2026-3301 Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection

A security flaw has been discovered in Totolink N300RH 6.1c.1353B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection...

10CVSS6.9AI score0.04028EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/27 12:0 a.m.18 views

TOTOLINK N300RH 操作系统命令注入漏洞

TOTOLINK N300RH is a long-range wireless router produced by TOTOLINK Corporation. The version TOTOLINK N300RH 6.1c.1353B20190305 contains a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter webWlanIdx in the function...

10CVSS7.3AI score0.04028EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/02/27 12:0 a.m.10 views

PT-2026-22302

Name of the Vulnerable Software and Affected Versions Totolink N300RH version 6.1c.1353 B20190305 Description A security flaw exists in the Totolink N300RH router. The issue is located in the setWebWlanIdx function of the /cgi-bin/cstecgi.cgi file within the Web Management Interface component...

10CVSS7.1AI score0.04028EPSS
SaveExploits1References14
Rows per page
Query Builder