CVE-2024-32335

TOTOLINK N300RT V2.1.8-B20201030.1539 is affected by a Store XSS vulnerability in the Wireless Page’s Access Control. Root cause: lack of input filtering/escaping in Access Control. Impact per available data: potential execution of arbitrary script in the user’s browser (C/L/I/L), CVSSv3.1 base s...

PT-2024-3096 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version V4.0.3c.7646 B20201211 Description: The issue exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function of the TOTOLINK EX200 router's firmware. This allows a remote attacker to...

CVE-2024-32325

TOTOLINK EX200 with firmware v4.0.3c.7646_B20201211 exposes an XSS in the setWiFiExtenderConfig function via the ssid parameter. Root cause appears to be lack of proper input filtering/escaping in the web UI. Impact is Cross-site Scripting on the device management context; no exploitation details...

CVE-2024-32327

TOTOLINK N300RT is affected by a Store Cross-site Scripting (XSS) vulnerability in the Port Forwarding feature of the Firewall page, impacting firmware version V2.1.8-B20201030.1539. The root cause, as described across sources, is improper handling/escaping of user-supplied data in Port Forwardin...

The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2024-32332

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in WDS Settings under the Wireless Page...

PT-2024-3093 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: The issue is related to a Cross-site scripting XSS vulnerability. This vulnerability exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function...

PT-2024-24512 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RT version V2.1.8-B20201030.1539 Description: The issue is related to a Store Cross-site scripting XSS vulnerability. This vulnerability is located in the WDS Settings under the Wireless Page, allowing potential exploitation...

TOTOLINK N300RT 安全漏洞

The TOTOLINK N300RT is an 802.11n compliant wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK N300RT version V2.1.8-B20201030.1539, which originates from a stored cross-site scripting vulnerability in the WDS Settings function on the Wireless page...

TOTOLINK EX200 安全漏洞

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...

CVE-2024-32326

The CVE-2024-32326 entry concerns TOTOLINK EX200 firmware version V4.0.3c.7646_B20201211, which is reported to have a Cross-site Scripting (XSS) vulnerability via the key parameter in the setWiFiExtenderConfig function. The vulnerability is mapped in multiple sources (NVD/NIST CVE entry, Red Hat ...

CVE-2024-32334

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...

CVE-2024-32333

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in MAC Filtering under the Firewall Page...

CVE-2024-32327

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Port Forwarding under the Firewall Page...

CVE-2024-32335

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Access Control under the Wireless Page...

CVE-2024-32335

TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Access Control under the Wireless Page...

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

The vulnerability of the /squashfs-root/etc-ro/custom.conf file of the Telnet service of the TOTOLINK N200RE microprogramming device allows a intruder to gain unauthorized access to protected information.

The vulnerability of the /squashfs-root/etc-ro/custom.conf file of the Telnet service for the TOTOLINK N200RE microprogramming device router software is related to the use of a vulnerable cryptographic algorithm in the configuration files. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the setTelnetCfg function in TOTOLINK EX200 router microprogramming software allows a hacker to execute the telnet service without requiring authentication.

The vulnerability of the setTelnetCfg function in TOTOLINK EX200 router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute the telnet service without going through the authentication process...

PT-2024-3097 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RT version V2.1.8-B20201030.1539 Description: The issue is related to the lack of protection for the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be exploited in the MAC...