13073 matches found
CVE-2024-1661
A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...
Hardcoded credentials
A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...
CVE-2024-1661
CVE-2024-1661 affects Totolink X6000R (v9.4.0cu.852_B20230719). A vulnerability in the file "/etc/shadow" allows hard-coded credentials, enabling a local-attack with high attack complexity and public disclosure of the exploit. No patch/version with a fix is provided in the sources. Connected PT-2...
CVE-2024-1661 Totolink X6000R shadow hard-coded credentials
A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...
CVE-2024-1661 Totolink X6000R shadow hard-coded credentials
A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...
TOTOLINK X6000R 信任管理问题漏洞
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a trust management issue vulnerability that stems from the presence of hard-coded credentials in the file /etc/shadow. No detailed vulnerability details are available at this time...
PT-2024-13695 · Undefined · Undefined
exploit 1. CVE-2023-42115: Exim AUTH Out-Of-Bounds Write RCE https://github.com/cammclain/CVE-2023-42115 2. TOTOLINK LR1200GB Auth Bypass https://ssd-disclosure.com/ssd-advisory-totolink-lr1200gb-auth-bypass 3. CVE-2023-49209: Barracuda Email Security Gateway - code injection...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
Design/Logic Flaw
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
TOTOLINK X5000R 安全漏洞
TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2024-25468
CVE-2024-25468 affects TOTOLINK X5000R (v9.1.0u.6369_B20230113). The issue is in the NTPSyncWithHost component, where the host_time parameter can be abused by a remote attacker to trigger a denial of service. The available documents describe a high-severity impact (CVSS v3.1 base score 7.5) with ...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
The vulnerability of the loginAuth function in the /cgi-bin/cstecgi.cgi file of the Totolink NR1800X router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the NTPSyncWithHost function in the cstecgi.cgi microprogramming software for TOTOLINK EX1200L routers allows a hacker to execute arbitrary code.
The vulnerability of the NTPSyncWithHost function in the cstecgi.cgi microprogramming software for TOTOLINK EX1200L routers exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the /cgi-bin/cstecgi.cgi file, a microprogramming system for the TOTOLink T6 mesh system, allows a perpetrator to increase their privileges.
The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
The vulnerability of the setStaticDhcpRules function in TOTOLINK A3300R router software allows a attacker to execute arbitrary commands.
The vulnerability of the setStaticDhcpRules function in TOTOLINK A3300R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the setMacFilterRules function in TOTOLINK A3300R router software allows a intruder to execute arbitrary commands.
The vulnerability of the setMacFilterRules function in TOTOLINK A3300R router microprogramming systems exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...