TOTOLINK EX200 Buffer Overflow Vulnerability

The TOTOLINK EX200 is a 2.4G wireless N range extender designed to extend the coverage of existing Wi-Fi networks. A buffer overflow vulnerability exists in the TOTOLINK EX200. The vulnerability originates from the function loginauth in the /cgi-bin/cstecgi.cgi file, which operates on the paramet...

TOTOLINK CP450 安全漏洞

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

TOTOLINK EX1200L Buffer Overflow Vulnerability

TOTOLINK EX1200L is a dual-band wireless signal amplifier launched by China Gion Electronics, which is mainly used to extend Wi-Fi coverage. The TOTOLINK EX1200L suffers from a buffer overflow vulnerability that originates from the UploadCustomModule function in the /cgi-bin/cstecgi.cgi file. No...

TOTOLINK N350RT Buffer Overflow Vulnerability

TOTOLINK N350RT is a small home router launched by China Gion Electronics , mainly for home network coverage needs. The TOTOLINK N350RT suffers from a buffer overflow vulnerability that originates in the file /cgi-bin/cstecgi.cgi where the function setParentalRules manipulates the parameters...

TOTOLINK A3700R Information Disclosure Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from an information disclosure vulnerability that originates in the /cgi-bin/ExportSettings.sh file of the apmib Configuration Handler component, which is not sufficiently protected agains...

TOTOLINK A3600R setMacQos function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3600R version 4.1.2cu.5182B20201102, which originates from the priority/macAddress parameter in the setMacQos function of the /cgi-bin/cstecgi.cgi...

TOTOLINK A3300R /etc/shadow.sample file hardcoded password vulnerability

The TOTOLINK A3300R is a wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3300R is vulnerable to a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /etc/shadow.sample file. No details of the vulnerability are provided at...

TOTOLINK A3300R 安全漏洞

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the function UploadCustomModule parameter in the file /cgi-bin/cstecgi.cgi that causes a buffer overflow. No details of the...

TOTOLINK A3100R Buffer Overflow Vulnerability (CNVD-2025-07820)

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R version 4.1.2cu.5050B20200504 suffers from a buffer overflow vulnerability that originates in the getSaveConfig function of /cgi-bin/cstecgi.cgi?action=save&setting where the httphost fails...

TOTOLINK A3600R setUrlFilterRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the url parameter in the setUrlFilterRules function of the /cgi-bin/cstecgi.cgi file that fails to correctly validate...

TOTOLINK A3600R UploadCustomModule function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the File parameter in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file that fails to correctly validat...

TOTOLINK A3600R setParentalRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the startTime/endTime parameter in the setParentalRules function of the /cgi-bin/cstecgi.cgi file that fails to...

TOTOLINK A3700R Access Control Error Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from the /wizard.html function of the Password Reset Handler component containing an improper access control issue. An attacker...

TOTOLINK A3600R setPortForwardRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the comment parameter in the setPortForwardRules function of the /cgi-bin/cstecgi.cgi file that fails to correctly...

The vulnerability of the setMacFilterRules function in the TOTOLINK CP900L wireless access point’s software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setMacFilterRules function in the TOTOLINK CP900L wireless access point software arises due to a stack overflow issue. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2024-7217

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has...

CVE-2024-7217 TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has...

CVE-2024-7217 TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has...

CVE-2024-7217

TOTOLINK CA300-PoE 6.2c.884 is affected by CVE-2024-7217. The vulnerability resides in the loginauth function of /cgi-bin/cstecgi.cgi, where manipulation of the password argument causes a buffer overflow. Exploitation can be performed remotely, and public disclosures exist. Affected software/vers...

CVE-2024-7216

A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The complexity of an attack is rather high. The exploitability is told to be...