boa HTTP Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

Totolink A3002R Router Arbitrary Command Execution

The vulnerability of TOTOLINK A3002R router microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially crafted POST request...

Totolink A3002R Buffer Overflow

The vulnerability of the Totolink A3002R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

TOTOLINK T6 Mesh System TCPcheck_net() MQTT Packet Handler Buffer Overflow

The vulnerability of the tcpchecknet function /router/meshSlaveDlfw in the MQTT Packet Handler component of the TOTOLINK T6 mesh-system software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

TOTOLink T6 System Code Execution

The vulnerability of the tcpchecknet microprogramming software used in the TOTOLink T6 mesh system lies in the lack of measures taken to protect data at the management level when processing the domain parameter. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

TOTOLink T6 SetWiFiAclRules Code Execution

The vulnerability of the setWiFiAclRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLink T6 mesh-system software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TOTOLink T6 System Code Execution

The vulnerability of the tcpchecknet function in the microprogramming software of the TOTOLink T6 mesh system arises from the lack of measures taken at the control level during the processing of the domain parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by...

TOTOLink T6 System Code Execution

The vulnerability of the tcpchecknet function in the microprogramming software of the TOTOLink T6 system arises from the lack of measures taken at the control level during the processing of the domain parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending...

TOTOLink T10 SetWiFiMeshName Data Compromise

The vulnerability of the setWiFiAclRules function /cgi-bin/cstecgi.cgi in the TOTOLink T10 mesh system is caused by buffer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

TOTOLink T10 Mesh SetWiFiAclRules Data Compromise

The vulnerability of the setWiFiAclRules function /cgi-bin/cstecgi.cgi in the TOTOLink T10 mesh system is caused by buffer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

TOTOLINK NR1800X DoS

The vulnerability of the setWiFiBasicCfg function in the microprogramming software for TOTOLINK NR1800X is related to buffer overflow in the stack when processing the parameter ssid. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK NR1800X DoS

The vulnerability of the setWiFiGuestCfg function in the microprogrammed software of TOTOLINK NR1800X routers is related to buffer overflows in the stack when processing the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failure...

TOTOLINK NR1800X DoS

The vulnerability of the setSmsCfg function in the microprogrammed software of TOTOLINK NR1800X routers is related to buffer overflow during the processing of the text parameter. Exploiting this vulnerability can allow an attacker to cause service failures...

TOTOLINK N300RB Router Arbitrary Command Execution

The vulnerability of TOTOLINK N300RB router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

TOTOLINK N200RE Sub Function Command Execution

The vulnerability of the sub41A0F8 function /cgi-bin/cstecgi.cgi of the TOTOLINK N200RE router software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK EX1200T Router Arbitrary Command Execution

The vulnerability of the built-in web server boa /boafrm/formReflashClientTbl of TOTOLINK EX1200T router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause ...

TOTOLINK EX1200T setLanguageCfg() Function Compromise

The vulnerability of the setLanguageCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK EX1200T router software arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

TOTOLINK EX1200T Web Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP in the HTTP POST Request Handler of the microprogramming software for router devices TOTOLINK EX1200T lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...

TOTOLINK EX1200T setUpgradeFW Command Execution

The vulnerability of the setUpgradeFW function in TOTOLINK EX1200T router microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...

TOTOLINK EX1200T setStaticDhcpConfig Buffer Overflow

The vulnerability of the setStaticDhcpConfig function in TOTOLINK EX1200T router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...