CVE-2024-7175 TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection

A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102 and classified as critical. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ipDoamin leads to os command injection. The attack can be initiated...

CVE-2024-7173

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/httphost leads to buffer overflow. The attack may be launched...

CVE-2024-7173

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/httphost leads to buffer overflow. The attack may be launched...

CVE-2024-7174

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. This affects the function setdeviceName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument deviceMac/deviceName leads to buffer overflow. It is possible to initiate the attack...

CVE-2024-7174 TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. This affects the function setdeviceName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument deviceMac/deviceName leads to buffer overflow. It is possible to initiate the attack...

CVE-2024-7174

TOTOLINK A3600R is affected by a buffer overflow in the setdeviceName function of /cgi-bin/cstecgi.cgi. Manipulating deviceMac/deviceName can trigger remote code execution; exploitation has been publicly disclosed. Affected version: 4.1.2cu.5182_B20201102. Public advisories corroborate remote imp...

CVE-2024-7174 TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. This affects the function setdeviceName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument deviceMac/deviceName leads to buffer overflow. It is possible to initiate the attack...

TOTOLINK A3600R cstecgi.cgi file setIpQosRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the comment parameter in the setIpQosRules function of the /cgi-bin/cstecgi.cgi file. An attacker...

TOTOLINK A3600R cstecgi.cgi file NTPSyncWithHost function OS command injection vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China Gion Electronics. The TOTOLINK A3600R suffers from an OS command injection vulnerability, which is located in the NTPSyncWithHost function in the /cgi-bin/cstecgi.cgi file, and stems from improper handling of the hostTime parameter,...

PT-2024-38149 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue affects the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file, where manipulation of the File argument leads to buffer overflow. This can be initiated...

PT-2024-38147 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue was found in the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi, where the manipulation of the argument webWlanIdx leads to buffer overflow. This issue can ...

TOTOLINK A3600R cstecgi.cgi file setTelnetCfg function command injection vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

TOTOLINK A3700R Command Injection Vulnerability

TOTOLINK A3700R is a wireless router, launched by TOTOLINK China Gion Electronics, a Taiwan-based networking equipment manufacturer. The TOTOLINK A3700R suffers from a command injection vulnerability located in the /cgi-bin/cstecgi.cgi file, which stems from improper handling of the hostName...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3600R version 4.1.2cu.5182B20201102, which originates from the priority/macAddress parameter in the setMacQos function of the /cgi-bin/cstecgi.cgi...

PT-2024-38142 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical vulnerability has been found in the setPortForwardRules function of the /cgi-bin/cstecgi.cgi file. The manipulation of the comment argument leads to a buffer overflow. Thi...

TOTOLINK A3600R Hardcoded Password Vulnerability

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the Telnet service, which can be exploited by an attacker to cause tampering of the device configuration, disclosure of sensitive...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the comment parameter in the setIpQosRules function of the /cgi-bin/cstecgi.cgi file. An attacker...

TOTOLINK A3600R cstecgi.cgi file getSaveConfig function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China Gion Electronics. The TOTOLINK A3600R suffers from a buffer overflow vulnerability, which is located in the /cgi-bin/cstecgi.cgi?action=save&setting file, and stems from improper handling of the httphost parameter. An attacker can...

TOTOLINK A3600R OS Command Injection Vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from an OS command injection vulnerability. The vulnerability originates in the /cgi-bin/cstecgi.cgi file stemming from improper handling of the ipDomain parameter. ...

PT-2024-38139 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue has been found, affecting the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument langType leads to buffer overflow. This issu...