12431 matches found
TOTOLINK X5000R 安全漏洞
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version v9.1.0cu.2350b20230313. The vulnerability stems from the setWanIeCfg method of /cgi-bin/cstecgi.cgi failing to properly filter constructed command special...
TOTOLINK X5000R 操作系统命令注入漏洞
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R setModifyVpnUser method, which can be exploited by an attacker to execute arbitrary commands...
CVE-2024-42742
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUrlFilterRules. Authenticated Attackers can send malicious packet to execute arbitrary commands...
CVE-2024-42543
TOTOLINK A3700R vulnerable to a buffer overflow in the http_host parameter of the loginauth function (v9.1.2u.5822_B20200513). Exploitation could allow remote code execution or denial of service; multiple sources (CNVD/CNNVD/Red Hat NVD) describe the same issue. No fix/version is specified in the...
CVE-2024-42547
The CVE-2024-42547 entry concerns TOTOLINK A3100R devices, specifically firmware version V4.1.2cu.5050_B20200504. The vulnerability is a buffer overflow in the http_host parameter within the loginauth function. Public sources (CNVD/CNNVD/Red Hat/NVD) describe potential remote code execution or de...
CVE-2024-42546
CVE-2024-42546 affects TOTOLINK A3100R, version 4.1.2cu.5050_B20200504, with a buffer overflow in the password parameter of the loginauth function . Red‑hat CNVD and other sources describe potential remote exploitation that could lead to arbitrary code execution or denial of service. The vulnerab...
TOTOLINK A3100R 安全漏洞
TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3100R version V4.1.2cu.5050B20200504, which originates from the password parameter of the loginauth function failing to correctly validate the length and siz...
CVE-2024-42744
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands...
PT-2024-6509 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000r version 9.1.0cu.2350 b20230313 Description: The issue is related to an OS command injection vulnerability in the setModifyVpnUser function, located in the /cgi-bin/cstecgi.cgi file. This vulnerability can be exploited by...
CVE-2024-42744
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands...
TOTOLINK A3002R 安全漏洞
TOTOLINK A3002R is a wireless dual-band Gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3002R version v4.0.0-B20230531.1404, which originates from formParentControl failing to correctly validate the length and size of the input data in...
CVE-2024-42546
TOTOLINK A3100R V4.1.2cu.5050B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function...
TOTOLINK X5000R 操作系统命令注入漏洞
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version v9.1.0cu.2350b20230313. The vulnerability stems from the setUPnPCfg method of /cgi-bin/cstecgi.cgi failing to properly filter constructed command special...
CVE-2024-42743
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setSyslogCfg . Authenticated Attackers can send malicious packet to execute arbitrary commands...
CVE-2024-42748
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands...
CVE-2024-42742
CVE-2024-42742 affects TOTOLINK X5000r (v9.1.0cu.2350_b20230313). The vulnerability is in the /cgi-bin/cstecgi.cgi file, setUrlFilterRules function, causing an OS command injection. Authenticated attackers can send a crafted packet to execute arbitrary commands. Public references consistently des...
CVE-2024-42743
The CVE-2024-42743 entry affects TOTOLINK X5000R, version 9.1.0cu.2350_b20230313, where the /cgi-bin/cstecgi.cgi file’s setSyslogCfg function allows OS command injection. The publicly available connected sources describe that an authenticated attacker can send a crafted packet to execute arbitrar...
CVE-2024-42743
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setSyslogCfg . Authenticated Attackers can send malicious packet to execute arbitrary commands...