15678 matches found
PT-2025-3386
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the eHour parameter in the setWiFiScheduleCfg function. Recommendations For...
CVE-2024-57013
CVE-2024-57013 concerns TOTOLINK X5000R devices. The TOTOLINK X5000R firmware version V9.1.0cu.2350_B20230313 is reported to contain an OS command injection vulnerability in the setScheduleCfg function, caused by improper handling/filtering of the switch parameter (constructor command characters)...
CVE-2024-57022
The CVE-2024-57022 entry affects TOTOLINK X5000R, firmware version V9.1.0cu.2350_B20230313. The root cause is improper filtering of shell constructs in the sHour parameter of setWiFiScheduleCfg, enabling OS command injection. This vulnerability allows arbitrary command execution over the network ...
CVE-2024-57012: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg...
CVE-2024-57021: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg...
CVE-2024-57021
CVE-2024-57021 affects TOTOLINK X5000R, firmware version V9.1.0cu.2350_B20230313. The vulnerability is an OS command injection in the router’s setWiFiScheduleCfg function, caused by inadequate filtering of the eHour parameter. Impact is arbitrary command execution with high severity (per linked C...
CVE-2024-57017
Totolink X5000R exposure: OS command injection in setVpnAccountCfg via the pass parameter on firmware V9.1.0cu.2350_B20230313. Root cause appears to be inadequate filtering of input (CNVD entry notes failure to filter constructor special characters/commands). Impact described as arbitrary command...
CVE-2024-57014: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...
TOTOLINK A6000R action_reboot command injection vulnerability
The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. A security vulnerability exists in the handling of the opmode parameter in the TOTOLINK A6000R actionreboot function, which can be...
TOTOLINK A6000R enable_wsh Command Injection Vulnerability
The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. A security vulnerability exists in the handling of the modifyOne parameter in the TOTOLINK A6000R enablewsh function, which can be...
TOTOLINK A6000R reset_wifi command injection vulnerability
The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. TOTOLINK A6000R suffers from a command injection vulnerability, which originates from the devname parameter of the resetwifi function,...
TOTOLINK A6000R action_passwd command injection vulnerability
The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding network experience. A security vulnerability exists in the TOTOLINK A6000R actionpasswd function's handling of the newpasswd parameter, which can be exploite...
CVE-2024-57213
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...
CVE-2024-57214
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57213
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...
CVE-2024-57214
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57211
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...
CVE-2024-57212
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...