Lucene search
+L

12640 matches found

CNVD
CNVD
added 2024/06/21 12:00 a.m.29 views

TOTOLINK A3700R setIpPortFilterRules function buffer overflow vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3700R version V9.1.2u.616520211012, which originates from eport failing to properly validate the length size of the input data in the function setIpPortFilterRules,...

8.8CVSS8.3AI score0.00614EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:00 a.m.10 views

The vulnerability of the setWiFiEasyCfg() function in the microprogramming software for TOTOLINK A3700R allows a hacker to execute arbitrary code.

The vulnerability of the setWiFiEasyCfg function in the microprogrammed wireless router software of TOTOLINK A3700R lies in the fact that the operation’s output escapes outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through the ss...

9CVSS6.3AI score0.00671EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/06/20 5:15 p.m.13 views

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

8.8CVSS6.2AI score0.01487EPSS
SaveExploits1References3
NVD
NVD
added 2024/06/20 5:15 p.m.34 views

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

8.8CVSS0.01487EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/06/20 5:15 p.m.7 views

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

8.8CVSS6.4AI score0.01487EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/20 12:00 a.m.29 views

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

0.01487EPSS
SaveExploits1References2
CVE
CVE
added 2024/06/20 12:00 a.m.58 views

CVE-2024-37626

CVE-2024-37626 affects TOTOLINK A6000R, firmware version V1.0.1-B20201211.2000 . The issue is a command-injection vulnerability in the iface parameter of the vif_enable function, allowing a remote attacker to execute arbitrary code. CVSSv3.1 base score is 8.8 (HIGH) with adjacent attack vector, n...

8.8CVSS8.4AI score0.01487EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/20 12:00 a.m.15 views

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

8.4AI score0.01487EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/06/20 12:00 a.m.10 views

TOTOLINK A6000R 安全漏洞

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a code execution vulnerability that originates from allowing a remote attacker to execute arbitrary code via the iface parameter in the vifenable function. No details of the vulnerability...

8.8CVSS8.2AI score0.01487EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/06/20 12:00 a.m.11 views

PT-2024-27683 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version 1.0.1-B20201211.2000 Description: A command injection issue allows a remote attacker to execute arbitrary code via the iface parameter in the vif enable function. This enables the attacker to inject and execute command...

8.8CVSS8.8AI score0.01487EPSS
SaveExploits1References6
CNVD
CNVD
added 2024/06/18 12:00 a.m.8 views

TOTOLINK A3700R loginAuth function buffer overflow vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the password parameter in the loginAuth function failing to properly validate the length and size of the input data, which can be...

9.8CVSS8AI score0.00643EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/06/18 12:00 a.m.7 views

TOTOLINK A3700R Stack Buffer Overflow Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a stack buffer overflow vulnerability that originates from the ssid in the function setWiFiGuestCfg failing to properly validate the length and size of the input data, which can be...

8.8CVSS7.9AI score0.00615EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/06/18 12:00 a.m.13 views

TOTOLINK A3700R UploadCustomModule function buffer overflow vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the File parameter in the UploadCustomModule function failing to properly validate the length and size of the input data, which ca...

8.8CVSS7.9AI score0.00614EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/06/18 12:00 a.m.9 views

TOTOLINK A3700R setWiFiBasicCfg Function Buffer Overflow Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the ssid in the function setWiFiBasicCfg failing to properly validate the length and size of the input data, which can be exploite...

9.8CVSS7.9AI score0.00663EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/06/18 12:00 a.m.7 views

TOTOLINK A3700R setWiFiEasyCfg Function Buffer Overflow Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the ssid in the function setWiFiEasyCfg failing to properly validate the length and size of the input data, which can be exploited...

9.8CVSS7.8AI score0.00671EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/14 2:15 p.m.8 views

CVE-2024-37640

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg...

8.8CVSS5.8AI score0.00616EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/14 2:15 p.m.24 views

CVE-2024-37640

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg...

8.8CVSS0.00616EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/14 2:15 p.m.8 views

CVE-2024-37639

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules...

8.8CVSS5.8AI score0.00614EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/14 2:15 p.m.18 views

CVE-2024-37637

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg...

9.8CVSS5.8AI score0.00671EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/14 2:15 p.m.23 views

CVE-2024-37639

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules...

8.8CVSS0.00614EPSS
SaveExploits1References1
Rows per page
Query Builder