15657 matches found
boafrm formReflashClientTbl Code Execution
The vulnerability of the submit-url function in the /boafrm/formReflashClientTbl file of the HTTP POST Request Handler component of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data...
CloudACMunualUpdate Arbitrary Command Execution
The vulnerability of the CloudACMunualUpdate function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...
TOTOLINK A3002RH Router setUnloadUserData Command Execution
The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3002RH router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in operating systems commands. Exploiting this vulnerability can allow a...
TOTOLINK EX200 Router Unauthenticated Access
The vulnerability of the getSysStatusCfg function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
Totolink-A800R downloadFile.cgi Code Execution
The vulnerability of the downloadFile.cgi function in the Totolink-A800R router microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
TOTOLINK A3700R Wireless Router DoS
The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...
HTTP POST Request Handler TOTOLINK A3002R A3002RU Data Compromise
The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
TOTOLINK A3000RU ExportSyslog RCE
The vulnerability of the /cgi-bin/ExportSyslog.sh script, a microprogramming solution for TOTOLINK A3000RU routers, is related to the improper assignment of privileges. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
Totolink N600R Code Execution
The vulnerability of the setWanConfig function in the Totolink N600R router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
TOTOLink X6000R Component Command Execution DoS
The vulnerability of the Wi-Fi Filtering Rule Handler component in the wireless dual-band router TOTOLink X6000R lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to execute arbitrary...
TOTOLINK A3700R setDdnsCfg DoS
The vulnerability of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a specially crafted POST request...
TOTOLINK A3700R DoS
The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST...
TOTOLINK A3700R DoS
The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted PO...
TOTOLINK A3700R setUrlFilterRules DoS
The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a speciall...
TOTOLINK A720R showSyslog Disclosure
The vulnerability of the “showSyslog” function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A720R router’s microprogramming system is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose protected information...
Totolink A3002R formDhcpv6s Data Compromise
The vulnerability of the formDhcpv6s function in the Totolink A3002R router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
HTTP POST Request Handler Arbitrary Command Execution
The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU devices is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands using the...
CVE-2022-41528
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...