TOTOLINK A6000R security vulnerabilities

The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. TOTOLINK A6000R suffers from a command injection vulnerability, which originates from the devname parameter of the resetwifi function,...

TOTOLINK A6000R security vulnerabilities

The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. A security vulnerability exists in the handling of the opmode parameter in the TOTOLINK A6000R actionreboot function, which can be...

CVE-2024-57213

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...

CVE-2024-57212

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

PT-2025-3411 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered via the newpasswd parameter in the action passwd function. This allows for potential exploitation. Recommendations: For TOTOLINK A6000R versio...

CVE-2024-57214

The TOTOLINK A6000R wireless router, specifically version V1.0.1-B20201211.2000 , is susceptible to a command injection vulnerability. The flaw originates from the devname parameter within the reset_wifi function, allowing for potential exploitation. While no specific exploit details or in-the-wi...

PT-2025-3412 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered, affecting the reset wifi function through the devname parameter. This allows for potential exploitation. No information is provided about the...

CVE-2024-57211: Improper Neutralization of Special Elements used in a Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

PT-2026-3432

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A flaw exists in the Totolink LR350 device. This issue is located within the setDiagnosisCfg function of the /cgi-bin/cstecgi.cgi file, part of the POST Request Handler component...

PT-2026-3433

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A security flaw exists in Totolink LR350. The issue is due to command injection within the setTracerouteCfg function of the /cgi-bin/cstecgi.cgi file, specifically in the POST Request...

CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-57212

The TOTOLINK A6000R (version V1.0.1-B20201211.2000 ) contains a command injection vulnerability (CWE-77) located in the action_reboot function. The flaw exists due to improper handling of the opmode parameter, which a remote attacker could exploit by submitting a specially crafted request to exec...

CVE-2024-57212

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...

CVE-2024-57212: Improper Neutralization of Special Elements used in a Command

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...

CVE-2024-57211

The TOTOLINK A6000R wireless router (version V1.0.1-B20201211.2000 ) is vulnerable to a command injection vulnerability. The flaw exists in the handling of the modifyOne parameter within the enable_wsh function, which allows a remote attacker to submit a specially crafted request to execute arbit...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

TOTOLINK A6000R security vulnerabilities

The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. A security vulnerability exists in the handling of the modifyOne parameter in the TOTOLINK A6000R enablewsh function, which can be...

PT-2025-3410 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered via the opmode parameter in the action reboot function. This allows for potential exploitation. Recommendations: For TOTOLINK A6000R version...

CVE-2024-57213

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...