CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

PT-2023-30279 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: The issue concerns incorrect access control, allowing attackers to reset login and WIFI passwords without proper authentication. Recommendations: For TOTOLINK X6000R version 9.4.0cu.8...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...

CVE-2023-46978

TOTOLINK X6000R V9.4.0cu.852B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication...

CVE-2023-46979

Summary: CVE-2023-46979 affects TOTOLINK X6000R (v9.4.0cu.852_B20230719). A command injection flaw exists in the enable parameter of the setLedCfg function, enabling arbitrary command execution via a network attacker with no authentication required. Evidence: cited sources describe the vulnerabil...

CVE-2023-46485

TOTOLINK X6000R (firmware 9.4.0cu.852_B20230719) is affected by CVE-2023-46485 via the stecgi.cgi setTracerouteCfg function. A remote attacker can execute arbitrary code through this component, with the device’s base CVSS v3.1 score 9.8 (CRITICAL) and network attack vector. The reports do not pro...

PT-2023-30048 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOlink X6000R version 9.4.0cu.852 B20230719 Description: An issue in the software allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component. This enables the attacker to potentially gai...

CVE-2023-46979

TOTOLINK X6000R V9.4.0cu.852B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function...

PT-2023-30286 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: The issue arises when handling the setLedCfg request, where there is no verification for the enable parameter. This lack of verification can lead to command injection. Recommendation...

CVE-2023-46992

TOTOLINK A3300R V17.0.0cu.557B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages...

PT-2023-30278 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR1200GB version 9.1.0u.6619 B20230130 Description: A stack overflow issue was discovered via the password parameter in the loginAuth function. This issue can be exploited, potentially allowing unauthorized access. Recommendations: F...

CVE-2023-46976

TOTOLINK A3300R 17.0.0cu.557B20221024 contains a command injection via the filename parameter in the UploadFirmwareFile function...

PT-2023-30277 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: The issue concerns a command injection via the file name parameter in the UploadFirmwareFile function. Recommendations: For TOTOLINK A3300R version 17.0.0cu.557 B20221024, avoid usin...

PT-2023-30280 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: A command injection issue was found via the enable parameter in the setLedCfg function. This allows for potential command injection attacks. Recommendations: For TOTOLINK X6000R versi...

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2023-46993

In TOTOLINK A3300R V17.0.0cu.557B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection...

CVE-2023-46976

TOTOLINK A3300R 17.0.0cu.557B20221024 contains a command injection via the filename parameter in the UploadFirmwareFile function...

CVE-2023-46992

TOTOLINK A3300R V17.0.0cu.557B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages...

CVE-2023-46484

CVE-2023-46484 affects TOTOLINK X6000R firmware 9.4.0cu.852_B20230719, with a vulnerability in the setLedCfg function that allows a remote attacker to execute arbitrary code. The CVSS v3.1 base score is 9.8 (CRITICAL), with network access, no user interaction, and no privileges required; confiden...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...