15678 matches found
CVE-2024-57213: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...
CVE-2024-57214: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
PT-2025-3409 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered via the modifyOne parameter in the enable wsh function. This allows for potential exploitation. Recommendations: For TOTOLINK A6000R version...
CVE-2024-57211
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...
TOTOLINK A6000R security vulnerabilities
The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding network experience. A security vulnerability exists in the TOTOLINK A6000R actionpasswd function's handling of the newpasswd parameter, which can be exploite...
CVE-2024-57213
The TOTOLINK A6000R wireless router, specifically version V1.0.1-B20201211.2000 , is vulnerable to a command injection flaw. The issue resides in the action_passwd function, where improper neutralization of special elements in the newpasswd parameter allows a remote attacker to submit a special r...
PT-2025-3382 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version V9.1.0cu.2350 B20230313 Description: The issue is related to the setVpnAccountCfg function, specifically the /web/cgi-bin/cstecgi.cgi endpoint, where the user parameter is not properly sanitized, allowing for OS comman...
PT-2025-3384 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version V9.1.0cu.2350 B20230313 Description: The issue is related to the setVpnAccountCfg function, specifically the /web/cgi-bin/cstecgi.cgi endpoint, where the desc parameter is not properly sanitized, allowing an attacker t...
PT-2025-1232 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the limit parameter in the setVpnAccountCfg function. The vulnerability allows ...
TOTOLINK A3002R Remote Code Injection Vulnerability
The TOTOLINK A3002R is a wireless dual-band Gigabit router. A remote code injection vulnerability exists in the TOTOLINK A3002R. The vulnerability is due to the ability to execute remote code in /bin/boa via formWsc in the affected version. An attacker can exploit this vulnerability to remotely...
PT-2024-9868 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: Totolink A3002R affected versions not specified Description: The issue is related to the formWsc function of the Totolink A3002R router's firmware, which fails to take measures to protect the web page structure. This can be exploited by a...
Totolink A3002R Form Wsc Code Execution
The vulnerability of the formWsc function in the Totolink A3002R router’s microprogramming software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...
CVE-2024-54907
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc...
CVE-2024-54907
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc...
CVE-2024-54907: Improper Control of Generation of Code
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc...
CVE-2024-54907
The TOTOLINK A3002R wireless dual-band Gigabit router (specifically version V4.0.0-B20230531.1404 ) is susceptible to a Remote Code Execution (RCE) vulnerability. The flaw exists in the embedded web server microprogramming software, specifically within /bin/boa via the formWsc function. The root ...
TOTOLINK A3002R security vulnerabilities
The TOTOLINK A3002R is a wireless dual-band Gigabit router. A remote code injection vulnerability exists in the TOTOLINK A3002R. The vulnerability is due to the ability to execute remote code in /bin/boa via formWsc in the affected version. An attacker can exploit this vulnerability to remotely...
CVE-2024-54907
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc...
