PT-2024-1270 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: The issue is related to a stack-based buffer overflow in the setOpModeCfg function of the /cgi-bin/cstecgi.cgi file. This can be triggered by manipulating the pppoeUser argument,...

CVE-2023-52041

An issue discovered in TOTOLINK X6000R V9.4.0cu.852B20230719 allows attackers to run arbitrary code via the sub410118 function of the shttpd program...

TOTOLINK A3300R setNtpCfg Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the tz parameter of the setNtpCfg method failing to correctly filter construct command special characters,...

TOTOLINK A3700R setTracerouteCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the setTracerouteCfg method failing to correctly filter constructed command special characters, commands, and so on...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's TOTOLINK Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the pppoeUser parameter of the setOpModeCfg function of...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from a stack buffer overflow...

CVE-2023-52042

An issue discovered in sub4117F8 function in TOTOLINK X6000R V9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the 'lang' parameter...

TOTOLINK A3300R setTr069Cfg Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the pass parameter of the setTr069Cfg method failing to correctly filter construct command special...

TOTOLINK X2000R 命令注入漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X2000R version 1.0.0-B20221212.1452, which stems from the macstr parameter of the formMapDelDevice function of the /boafrm/formMapDelDevice file failing to correctly...

TOTOLINK A3700R setOpModeCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the setOpModeCfg method failing to correctly filter constructed command special characters, commands, and so on. An...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from a stack buffer overflow...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a code execution vulnerability that stems from the application's failure to properly filter construct command special characters, commands, etc. An attacker can exploit the vulnerability ...

TOTOLINK A3300R setDdnsCfg Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the username parameter of the setDdnsCfg method failing to correctly filter construct command special...

TOTOLINK A3700R setDiagnosisCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R version v9.1.2u.5822B20200513, which stems from the setDiagnosisCfg method failing to correctly filter constructed command special characters, commands, and...

PT-2024-1173 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: Totolink X2000R version 1.0.0-B20221212.1452 Description: A critical issue is related to the function formMapDelDevice in the /boafrm/formMapDelDevice file, where the manipulation of the macstr argument leads to command injection. This can be...

TOTOLINK N350RT Security Breach

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK N350RT version 9.3.5u.6265, which originates from the file /cgi-bin/cstecgi.cgi that can lead to incorrect access control...

TOTOLINK A3300R setScheduleCfg Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the minute parameter of the setScheduleCfg method failing to correctly filter construct command special...

PT-2024-1174 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: A critical issue affects the setIpPortFilterRules function in the /cgi-bin/cstecgi.cgi file, where manipulation of the sPort argument leads to a stack-based buffer overflow. This ca...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK EX1200T version V4.1.2cu.5232B20210713, which stems from the main method failing to properly filter construct command special characters, commands, and so on. An...

CVE-2023-52041

The CVE-2023-52041 entry affects TOTOLINK X6000R (firmware V9.4.0cu.852_B20230719). Technical details from connected sources indicate the root cause is in the shttpd component, specifically the sub_410118 function, which can be abused to execute arbitrary code remotely (attack vector: network). I...