15669 matches found
CVE-2025-28137
The TOTOLINK A810R (version 4.1.2cu.5182_B20201026) is susceptible to a pre-auth remote command execution vulnerability in the setNoticeCfg function. The root cause is the failure to properly neutralize special elements used in operating system commands via the NoticeUrl parameter. A malicious ac...
PT-2025-16554 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical issue has been identified, affecting the setSmartQosCfg function of the /cgi-bin/cstecgi.cgi file. This leads to improper access controls. The issue can be exploited...
CVE-2025-22903: Stack-based Buffer Overflow
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig...
CVE-2025-22900: Stack-based Buffer Overflow
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
PT-2025-16553 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical vulnerability was found in the TOTOLINK A3700R, affecting the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access...
CVE-2025-28136
The TOTOLINK A800R wireless router, specifically version V4.1.2cu.5137_B20200730 , contains a stack-based buffer overflow vulnerability in the downloadFile.cgi function. The root cause is a failure to properly validate the length of input data, leading to memory reading beyond buffer boundaries. ...
CVE-2025-22900
The Totolink N600R wireless router (version 4.3.0cu.7647_B20210106 ) is vulnerable to a stack-based buffer overflow in the setWanConfig function. The root cause is the failure to properly validate the length and size of input data provided via the macCloneMac parameter. Exploitation of this vulne...
TOTOLINK N600R security vulnerabilities
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that originates from the macCloneMac parameter in the setWanConfig function failing to properly validate the length and size of the input data, which can...
TOTOLINK A810R security vulnerabilities
The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a command execution vulnerability that stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed command special character...
PT-2025-16561
Name of the Vulnerable Software and Affected Versions TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description A critical issue affects the setUrlFilterRules function of the /cgi-bin/cstecgi.cgi file, leading to improper access controls. The issue can be exploited remotely. Recommendations For...
CVE-2025-22903
The TOTOLINK N600R wireless router (firmware V4.3.0cu.7647_B20210106 ) is vulnerable to a stack-based buffer overflow within the setWiFiWpsConfig function. The flaw exists because the pin parameter fails to properly validate the length of the input data, leading to memory corruption. Attackers ca...
PT-2025-16550 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical vulnerability has been found in the TOTOLINK A3700R, affecting the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi in the Password Handler...
CVE-2025-28137
The TOTOLINK A810R V4.1.2cu.5182B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...
PT-2025-16340
Name of the Vulnerable Software and Affected Versions TOTOLINK A810R version 4.1.2cu.5182 B20201026 Description The issue concerns a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. This allows for unauthorized execution of commands...
PT-2025-16339 · Totolink · Totolink A800R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version V4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi of TOTOLINK A800R. The issue allows for a potential buffer overflow. Recommendations: For TOTOLINK A800R version...
PT-2025-16377 · Totolink · Totolink N600R
Name of the Vulnerable Software and Affected Versions: Totolink N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the macCloneMac parameter in the setWanConfig function. Recommendations: For Totolink N600R version 4.3.0cu.7647 B20210106, consider...
PT-2025-16556 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical issue affects the setUPnPCfg function of the file /cgi-bin/cstecgi.cgi, leading to improper access controls. The manipulation can be initiated remotely. The exploit has bee...
TOTOLINK N600R security vulnerabilities
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...
CVE-2025-28137: Improper Neutralization of Special Elements used in an OS Command
The TOTOLINK A810R V4.1.2cu.5182B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...