CVE-2025-5505 TOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument servicetype leads to cross site scripting. The attack...

CVE-2025-5504 TOTOLINK X2000R formWsc command injection

A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-5504

CVE-2025-5504 affects TOTOLINK X2000R 1.0.0-B20230726.1108. The issue is a vulnerability in the /boafrm/formWsc endpoint where manipulating the peerRptPin parameter leads to command injection. Remote attack is possible, and public exploitation has been disclosed. Several sources (NVD, Red Hat, CN...

CVE-2025-5504 TOTOLINK X2000R formWsc command injection

A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-5503 TOTOLINK X15 formMapReboot stack-based overflow

A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-5503 TOTOLINK X15 formMapReboot stack-based overflow

A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-5503

CVE-2025-5503 affects TOTOLINK X15 with firmware 1.0.0-B20230714.1105. The issue resides in the /boafrm/formMapReboot function; manipulating the deviceMacAddr argument leads to a stack-based buffer overflow, enabling remote execution of code. A public exploit is disclosed, and the vendor did not ...

CVE-2025-5502

A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched...

CVE-2025-5502

A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched...

CVE-2025-5502

TOTOLINK X15, v1.0.0-B20230714.1105, contains a command injection in the function formMapReboot (file /boafrm/formMapReboot) triggered by manipulating the deviceMacAddr parameter. Attack surface may be remote; exploit has been disclosed publicly and vendor did not respond. A PT-security write-up ...

CVE-2025-5502 TOTOLINK X15 formMapReboot command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched...

CVE-2025-5502 TOTOLINK X15 formMapReboot command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched...

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a command injection vulnerability that stems from the parameter deviceMacAddr failing to properly filter constructed command special characters, commands, and so on. No detailed...

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a stack buffer overflow vulnerability. The vulnerability originates from the /boafrm/formMapReboot file, which does not perform strict length checking and boundary handling of input...

TOTOLINK A3002RU 代码注入漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the MAC Filtering Page component parameter Comment, for...

TOTOLINK X2000R 注入漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter devicemac1, no details of the vulnerability are provided at this time...

The vulnerability of the setParentalRules() function in TOTOLINK A810R router software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the setParentalRules function in TOTOLINK A810R router microprogramming software is related to buffer overflows in the stack when processing the startTime and endTime parameters. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service...

TOTOLINK X2000R 代码注入漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK X2000R, which stems from the lack of effective filtering and escaping of user-supplied data by the Device Name parameter in the component Parent Controls Page,...

TOTOLINK X2000R 代码注入漏洞

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter servicetype in the file /boafrm/formPortFw. No...

TOTOLINK X2000R 注入漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the parameter peerRptPin failing to correctly filter constructed command special characters, commands, and so on. No details of the...