13054 matches found
CVE-2024-34921
TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...
PT-2024-24528 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an authenticated remote command execution via the mru parameter in the cstecgi.cgi binary. This allows for potential exploitation, but details about the...
PT-2024-3479 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to a command injection via the disconnectVPN function. It is caused by the lack of input data sanitization measures in the TOTOLINK X5000R router's firmware...
PT-2024-26318 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6698 B20230810 Description: A stack overflow issue was discovered via the password parameter in the loginAuth function. This issue can be exploited, potentially allowing unauthorized access. Recommendations: For...
PT-2024-25254 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to v1.0.0-B20231213.1013 Description: The issue allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the "Wireless Page" API endpoint. This enables the attacker to perform...
PT-2024-24531 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found in the setSSServer function via the timeout parameter at the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version...
PT-2024-24530 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found via the port parameter in the setSSServer function at "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version 9.1.0cu.23...
PT-2024-24219 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A hardcoded password for the root user was found in the /etc/shadow.sample file. Recommendations: For TOTOLINK EX200 version 4.0.3c.7646 B20201211, consider changing the hardcoded...
PT-2024-24532 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found, related to the setSSServer function, specifically via the password parameter. Recommendations: For TOTOLINK X5000R version 9.1.0cu.2350 B20230313...
The vulnerability of the microprogrammed Wi-Fi range extension software TOTOlink EX1800T arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary code and gain increased privileges.
The vulnerability of the TOTOlink EX1800T Wi-Fi range extender’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and...
CVE-2024-34209
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function...
CVE-2024-34209
TOTOLINK CP450, version 4.1.0cu.747_B20191224, contains a stack buffer overflow in the setIpPortFilterRules function. The root cause is improper input length/size validation in that function, enabling potential overflow. Documented impacts include arbitrary code execution or denial of service, wi...
CVE-2024-34209
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function...
CVE-2024-34213
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function...
CVE-2024-34213
CVE-2024-34213 affects TOTOLINK CP450 devices (version 4.1.0cu.747_B20191224). A stack buffer overflow in the SetPortForwardRules function is described across sources (CNVD, NVD, CVE list) and is capable of enabling arbitrary code execution or causing a denial of service. Exploitation details are...
CVE-2024-34213
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function...
CVE-2024-34200
TOTOLINK CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function...
CVE-2024-34200
TOTOLINK CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function...
CVE-2024-34200
CVE-2024-34200 affects TOTOLINK CPE CP450 (firmware 4.1.0cu.747_B20191224). The vulnerability is a stack buffer overflow in the setIpQosRules function, caused by improper validation of input data. Reported impacts include potential arbitrary code execution or denial of service. No patch/version f...