TOTOLINK A3300R 安全漏洞

The TOTOLINK A3300R is a dual-band wireless router. A command execution vulnerability exists in the TOTOLINK A3300R, which stems from a Remote Command Execution RCE vulnerability in multiple parameters of the setOpModeCfg function, which can be exploited by an attacker to execute arbitrary system...

The vulnerability of the MAC-address filtering component of the TOTOLINK X2000R microprogrammable router allows a attacker to carry out XSS attacks.

The vulnerability of the MAC-address filtering component of the TOTOLINK X2000R microprogrammable router exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2024-27521

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote command execution RCE vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows...

PT-2024-21930 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: The issue allows an attacker to take complete control of the device through an unauthenticated remote command execution via multiple parameters in the setOpModeCfg function. This...

CVE-2024-27521

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote command execution RCE vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows...

CVE-2024-27521

The CVE-2024-27521 issue affects TOTOLINK A3300R (version 17.0.0cu.557_B20221024). An unauthenticated remote command execution flaw exists in the setOpModeCfg function, allowing an attacker to execute arbitrary system commands with root privileges. Impact is device takeover via remote abuse, with...

The vulnerability of the VPN server for microprogramming router Totolink X2000R, which allows attackers to perform cross-site scripting attacks

The vulnerability of the VPN server for microprogramming routers Totolink X2000R relates to the lack of measures taken to protect the website structure during the processing of the “Comment” input field. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attack...

TOTOLINK X2000R Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

CVE-2024-28402

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...

CVE-2024-28402

The CVE-2024-28402 entry relates to TOTOLINK X2000R before version 1.0.0-B20231213.1013, which contains a Stored Cross-Site Scripting (XSS) vulnerability in the IP/Port Filtering function within the Firewall page. The underlying issue is an XSS flaw in how user-supplied data is handled in that fi...

CVE-2024-28402

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...

PT-2024-22419 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to V1.0.0-B20231213.1013 Description: The issue is related to a Stored Cross-site scripting XSS vulnerability. This vulnerability is located in the IP/Port Filtering section under the Firewall Page. Stored XSS i...

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

PT-2024-22888 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to v1.0.0-B20231213.1013 Description: The issue is related to a Cross-site scripting XSS vulnerability. This vulnerability is located in the Wireless settings under the Easy Setup Page. Recommendations: For...

TOTOLINK X2000R 安全漏洞

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

CVE-2024-29419

TOTOLINK X2000R is affected by a Cross-site Scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page. The issue exists in versions prior to v1.0.0-B20231213.1013, with the likely impact being execution of arbitrary script within the device’s web UI. Remediation per PT-2024...

TOTOLINK X5000R and A7000R Buffer Overflow Vulnerability

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability originates from the sub41F7E8 function in the /www/cgi bin/cstegi.cgi file copying the contents of the IP field without checking the data...