15658 matches found
CVE-2025-45787
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules...
CVE-2025-45788
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules...
CVE-2025-45798
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cstemodules/system.so library, specifically in the processing of the IpTo parameter...
CVE-2025-45843
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...
CVE-2025-45842
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...
CVE-2025-45790
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cstemodules/firewall.so...
CVE-2025-45797
TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...
CVE-2025-45789
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules...
CVE-2025-45845
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function...
CVE-2025-45844
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...
CVE-2025-45787
CVE-2025-45787 affects TOTOLINK A3100R (V5.9c.1527). The issue is a buffer overflow in the comment parameter of setIpPortFilterRules, which can crash the application or, per CNVD/CNNVD, potentially allow arbitrary code execution. Public updates on fixes are not provided in the documents; PT-Secur...
CVE-2025-45798: Improper Neutralization of Special Elements used in a Command
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cstemodules/system.so library, specifically in the processing of the IpTo parameter...
CVE-2025-45788: Out-of-bounds Write
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules...
CVE-2025-45797: Out-of-bounds Write
TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...
CVE-2025-45842: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...
CVE-2025-45841: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...
CVE-2025-45843: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...
CVE-2025-45798
CVE-2025-45798 is a command execution vulnerability in the TOTOLINK A950RG with firmware version 4.1.2cu.5204_B20210112. It arises from improper handling of the IpTo parameter in the setNoticeCfg interface inside /lib/cste_modules/system.so, enabling arbitrary command execution. Documented impact...
PT-2025-20392 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid parameter in the setWiFiGuestCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK...