CVE-2024-37635

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg...

CVE-2024-37633

TOTOLINK A3700R is affected by a stack overflow in the setWiFiGuestCfg function triggered via the ssid parameter. The issue, observed in version 9.1.2u.6165_20211012, is described as a stack buffer overflow in the input handling, with potential to execute arbitrary code or cause a denial of servi...

CVE-2024-37631

TOTOLINK A3700R is affected by a stack overflow in the UploadCustomModule function, triggered via the File parameter. The issue is reported for firmware version 9.1.2u.6165_20211012. Public sources describe possible arbitrary code execution or denial of service stemming from improper input valida...

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247B20211129, in the cgi function setNoticeCfg of the file /lib/cstemodules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct...

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247B20211129, in the cgi function setNoticeCfg of the file /lib/cstemodules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct...

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247B20211129, in the cgi function setNoticeCfg of the file /lib/cstemodules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct...

PT-2024-27107 · Totolink · Totolink Ac1200 Wireless Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware version A3100R V4.1.2cu.5247 B20211129 Description: The issue arises from the lack of input validation in the setNoticeCfg function, specifically with the NoticeUrl variable. This...

CVE-2024-36650

CVE-2024-36650 affects TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129. In the cgi function setNoticeCfg of /lib/cste_modules/system.so, the length of input NoticeUrl is not checked, causing a buffer overflow that can be exploited to send malicious HTTP o...

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247B20211129, in the cgi function setNoticeCfg of the file /lib/cstemodules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct...

TOTOLINK AC1200 安全漏洞

TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the cgi function setNoticeCfg in /lib/cstemodules/system.so that does not check the length of the user input string NoticeUrl,...

TOTOLINK CP300 Hardcoded Password Vulnerability

TOTOLINK is a mid-to-high-end wireless routing brand in the Asia Pacific region. A hard-coded password vulnerability exists in the TOTOLINK CP300, which can be exploited by an attacker to log in as root...

TOTOLINK LR350 Command Injection Vulnerability

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from a command injection vulnerability that stems from being able to perform command injection via the hosttime parameter in the NTPSyncWithHost function. No details of the vulnerability are...

CVE-2024-36782

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-36782

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-36783

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection via the hosttime parameter in the NTPSyncWithHost function...

CVE-2024-36783

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection via the hosttime parameter in the NTPSyncWithHost function...

CVE-2024-36782

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-36783

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection via the hosttime parameter in the NTPSyncWithHost function...

CVE-2024-36783

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection via the hosttime parameter in the NTPSyncWithHost function...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from a command injection vulnerability that stems from being able to perform command injection via the hosttime parameter in the NTPSyncWithHost function. No details of the vulnerability are...