TOTOLINK A3000RU product.ini file hard-coded password vulnerability

The TOTOLINK A3000RU is a home wireless router. The TOTOLINK A3000RU suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /webcste/cgi-bin/product.ini file. An attacker can exploit the vulnerability by using a hard-coded password to access t...

PT-2024-38146 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue has been found, affecting the setUrlFilterRules function of the file /cgi-bin/cstecgi.cgi. The manipulation of the url argument leads to a buffer overflow. This issu...

TOTOLINK A3600R Buffer Overflow Vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK , mainly used to provide Wi-Fi access, network routing and parental control. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the webWlanIdx parameter in the...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK , mainly used to provide Wi-Fi access, network routing and parental control. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the webWlanIdx parameter in the...

TOTOLINK A3600R 操作系统命令注入漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from an OS command injection vulnerability. The vulnerability originates in the /cgi-bin/cstecgi.cgi file stemming from improper handling of the ipDomain parameter. ...

TOTOLINK A3600R Buffer Overflow Vulnerability (CNVD-2025-08345)

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that stems from improper handling of the deviceMac and deviceName parameters. An attacker can exploit this vulnerability to execute arbitrary code to gain control of the device...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the FileName parameter in the setUpgradeFW function of the /cgi-bin/cstecgi.cgi file. An attacker...

PT-2024-38143 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue was found in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. The manipulation of the telnet enabled argument leads to command injection. The attack can b...

PT-2024-38140 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue has been found, affecting the function setMacQos of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument priority/macAddress leads to buffer overflow. Thi...

TOTOLINK A3600R cstecgi.cgi file setUpgradeFW function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the FileName parameter in the setUpgradeFW function of the /cgi-bin/cstecgi.cgi file. An attacker...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the startTime/endTime parameter in the setParentalRules function of the /cgi-bin/cstecgi.cgi file that fails to...

TOTOLINK A3100R Command Injection Vulnerability

The TOTOLINK A3100R is a wireless router. The TOTOLINK A3100R suffers from a command injection vulnerability that stems from improper handling of the telnetenabled parameter. An attacker can exploit this vulnerability to obtain sensitive information...

TOTOLINK A3600R Buffer Overflow Vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router manufactured by China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3600R. The vulnerability originates from the langType parameter in the setLanguageCfg function of the /cgi-bin/cstecgi.cgi file. An...

CVE-2024-7173 TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/httphost leads to buffer overflow. The attack may be launched...

CVE-2024-7173

CVE-2024-7173 affects TOTOLINK A3600R (4.1.2cu.5182_B20201102). The loginauth function in /cgi-bin/cstecgi.cgi mishandles the password and http_host parameters, causing a buffer overflow that could be exploited remotely. Several sources identify this as a critical issue. Remediation/workaround gu...

CVE-2024-7173 TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/httphost leads to buffer overflow. The attack may be launched...

CVE-2024-7172

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this vulnerability is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument httphost leads to buffer overflow. The attack can be...

CVE-2024-7172

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this vulnerability is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument httphost leads to buffer overflow. The attack can be...

CVE-2024-7171

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostTime leads to os command injection. It is possible to launch the attack remotely. The...

CVE-2024-7171

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostTime leads to os command injection. It is possible to launch the attack remotely. The...