Totolink-N600R SetWiFiWpsConfig Code Execution

The vulnerability of the setWiFiWpsConfig function in the Totolink-N600R router’s microprogramming system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TOTOLINK A3002RH Router SetUploadUserData Command Execution

The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3002RH router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in operating systems commands. Exploiting this vulnerability can allow a...

TOTOLINK A3700R WiFi Easy Guest Cfg Privilege Escalation

The vulnerability of the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

TOTOLINK A3700R setSmartQosCfg Privilege Escalation

The vulnerability of the setSmartQosCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

TOTOLINK Function Compromise

The vulnerability of the CloudACMunualUpdate function in the microprogrammed routing software devices TOTOLink T10, TOTOLINK A3100R, TOTOLINK A950RG, TOTOLINK A800R, TOTOLINK N600R, TOTOLINK A3000RU, and TOTOLINK A810R lies in the copying of buffers without checking the size of the input data...

HTTP POST Request Handler TOTOLINK A3002R A3002RU Data Compromise

The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality...

Totolink A3002R Router Arbitrary Command Execution

The vulnerability of FUN00459fdc in the Totolink A3002R router’s microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Totolink A3002R formIpv6Setup Buffer Overflow

The vulnerability of the formIpv6Setup function in the Totolink A3002R router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Totolink A3002R formDnsv6 Data Compromise

The vulnerability of the formDnsv6 function in the Totolink A3002R router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

HTTP POST Request Handler TOTOLINK A3002R A3002RU Data Compromise

The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

boafrm/formDMZ HTTP POST Request Handler Code Execution

The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...

TOTOLINK CP450 Set WebWlanIdx Command Execution

The vulnerability of the setWebWlanIdx function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the webWlanIdx parameter...

TOTOLINK A3700R Wireless Router Privilege Escalation

The vulnerability of the setWiFiEasyCfg/setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

TOTOLINK A720R Router Disclosure Protected Information

The vulnerability of the getInitCfg/getSysStatusCfg functions in the TOTOLINK A720R router’s microprogramming system is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

TOTOLINK N150RT URL Filtering XSS

The vulnerability of the URL Filtering component of the TOTOLINK N150RT router’s microprogramming software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

boafrm formwsc Code Execution

The vulnerability of the /boafrm/formWsc file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who...

TOTOLINK A3000RU ExportIbmsConfig DoS

The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions...

TOTOLINK CA600-PoE NTPSyncWithHost Code Execution

The vulnerability of the NTPSyncWithHost function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

TOTOLINK N150RT XSS

The vulnerability of the Virtual Server Page component of TOTOLINK N150RT router microprogramming systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

HTTP POST Request Handler TOTOLINK A3002R A3002RU Data Compromise

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...