15669 matches found
PT-2025-18663 · Totolink · Totolink Ca600-Poe
Name of the Vulnerable Software and Affected Versions: TOTOLINK CA600-PoE version V5.3c.6665 B20180820 Description: A command injection issue was discovered in the msg process function via the Port parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...
PT-2025-18657 · Totolink · Totolink Ca600-Poe
Name of the Vulnerable Software and Affected Versions: TOTOLINK CA600-PoE version 5.3c.6665 B20180820 Description: A command injection issue was discovered in the setWebWlanIdx function through the webWlanIdx parameter. This issue allows attackers to execute arbitrary commands via a manipulated...
CVE-2025-29064: Improper Control of Generation of Code
An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...
PT-2025-14802 · Totolink · Totolink X18
Name of the Vulnerable Software and Affected Versions: TOTOLINK x18 version 9.1.0cu.2024 B20220329 Description: The issue allows a remote attacker to execute arbitrary code via the sub 410E54 function of the cstecgi.cgi. Recommendations: For TOTOLINK x18 version 9.1.0cu.2024 B20220329, as a...
CVE-2025-2955
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
PT-2025-18655 · Totolink · Totolink Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLINK CPE CP900 version 6.3c.1144 B20190715 Description: A command injection issue was found in the setApRebootScheCfg function through the hour or minute parameters. This allows attackers to execute arbitrary commands via a manipulated...
PT-2025-18653 · Totolink · Totolink Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLINK CPE CP900 version 6.3c.1144 B20190715 Description: A command injection issue was discovered in the setUploadUserData function through the FileName parameter. This issue allows attackers to execute arbitrary commands via a manipulated...
PT-2025-18652 · Totolink · Totolink Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLINK CPE CP900 version 6.3c.1144 B20190715 Description: A command injection issue was found in the CloudSrvUserdataVersionCheck function, allowing attackers to execute arbitrary commands via a crafted request. This is possible through the...
CVE-2025-2955
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
CVE-2025-2955
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
CVE-2025-2955 TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
CVE-2025-2955 TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
CVE-2025-2955
The CVE-2025-2955 entry concerns TOTOLINK A3000RU (up to 5.9c.5185) and a flaw in the IBMS Configuration File Handler, specifically in /cgi-bin/ExportIbmsConfig.sh. The root cause is improper access controls on the ExportIbmsConfig.sh endpoint, which can be triggered remotely. The issue is associ...
CVE-2025-25579
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr...
CVE-2025-28256
An issue in TOTOLINK A3100R V4.1.2cu.5247B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cstemodules/wireless.so...
PT-2025-13627 · Totolink · Totolink A3000Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3000RU versions up to 5.9c.5185 Description: A vulnerability has been found in the IBMS Configuration File Handler component, affecting the /cgi-bin/ExportIbmsConfig.sh file. This issue leads to improper access controls and can be...
CVE-2025-2955: Improper Access Control
A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...
TOTOLINK A3000RU security vulnerabilities
The TOTOLINK A3000RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3000RU is vulnerable to an access control error vulnerability that stems from an improper access control issue in the IBMS profile handling component. No detailed vulnerability details are available at...