CVE-2024-34210

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter...

CVE-2024-34210

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter...

CVE-2024-34210

CVE-2024-34210 affects TOTOLINK outdoor CPE CP450 (version 4.1.0cu.747_B20191224). The root cause is a command injection in CloudACMunualUpdate via the FileName parameter, enabling potential remote code execution over the network. Public exploit details are not provided in the documents; CVSS ind...

CVE-2024-34211

Totolink CP450 v4.1.0cu.747_B20191224 contains a hardcoded password in /etc/shadow.sample that can allow an attacker to log in as root. CVSSv3.1 measures a high impact (8.8) with adjacent attack vector and no potential user interaction. Connected sources provide concrete details: affected softwar...

CVE-2024-34211

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-34211

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-34212

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function...

CVE-2024-34212

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function...

CVE-2024-34212

TOTOLINK CP450 is affected by CVE-2024-34212 due to a stack buffer overflow in the CloudACMunualUpdate function. The vulnerability stems from improper validation of input data length in CloudACMunualUpdate, allowing a potential denial-of-service condition. Affected software/version: TOTOLINK CP45...

CVE-2024-34219

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

CVE-2024-34219

TOTOLINK CP450 V4.1.0cu.747B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet...

CVE-2024-34219

CVE-2024-34219 applies to TOTOLINK CP450 firmware v4.1.0cu.747_B20191224. The vulnerability is in the SetTelnetCfg function and is caused by insufficient input validation in the TELNET component of the router’s firmware. This may allow an attacker to log in through Telnet, with potential remote c...

CVE-2024-34218

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter...

CVE-2024-34218

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter...

CVE-2024-34218

Summary: CVE-2024-34218 affects TOTOLINK CP450 outdoor CPE firmware 4.1.0cu.747 B20191224. A command injection exists in NTPSyncWithHost via the hostTime parameter, enabling remote command execution by an attacker who can reach the device. The issue arises from inadequate sanitization of the host...

PT-2024-3692 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A stack buffer overflow issue was found in the addWlProfileClientMode function, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: For TOTOLINK CP4...

PT-2024-3690 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: The issue is related to a vulnerability in the SetTelnetCfg function, which can be exploited by attackers to log in through telnet. This vulnerability exists due to insufficient input...

PT-2024-25745 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: The issue is related to a hardcoded password vulnerability found in the /etc/shadow.sample file. This vulnerability allows attackers to log in as root. Recommendations: For TOTOLINK...

PT-2024-25739 · Totolink · Totolink Outdoor Cpe Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK outdoor CPE CP450 version 4.1.0cu.747 B20191224 Description: A command injection issue was found in the setUpgradeFW function via the FileName parameter. Recommendations: For version 4.1.0cu.747 B20191224, consider restricting access...

PT-2024-25740 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A command injection issue was found in the download firmware function, which could potentially be exploited. Recommendations: For TOTOLINK CP450 version 4.1.0cu.747 B20191224, consider...