CVE-2023-46993

In TOTOLINK A3300R V17.0.0cu.557B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection...

CVE-2023-46993

The CVE-2023-46993 entry applies to TOTOLINK A3300R, specifically v17.0.0cu.557_B20221024, where the setLedCfg handler does not validate the enable parameter, enabling potential command injection. The issue is documented across multiple sources (NVD, CNVD/CNNVD, Red Hat, CVE listing, PT Security)...

CVE-2023-46977

The CVE-2023-46977 entry affects TOTOLINK LR1200GB version 9.1.0u.6619_B20230130, where a stack overflow is triggered by the password parameter in the loginAuth function. Multiple sources corroborate a boundary/stack overflow that could allow remote execution of code or cause a denial of service....

CVE-2023-46978

CVE-2023-46978 affects TOTOLINK X6000R, specifically version 9.4.0cu.852_B20230719. The root cause is an Incorrect Access Control issue that allows attackers to reset the device’s login password and Wi‑Fi password without authentication. Multiple connected sources corroborate this vulnerability a...

The vulnerability of the settings/setTracerouteCfg component in the TOTOLINK X5000R router software allows a malicious actor to execute arbitrary commands and gain full access to the device.

The vulnerability of the settings/setTracerouteCfg component of the TOTOLINK X5000R router software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2023-9693 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: The issue is related to incorrect access control, allowing attackers to reset critical passwords without authentication by visiting specific pages, such as /wizard.html or...

TOTOLINK X2000R Gh formMeshUploadConfig Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formMeshUploadConfig...

TOTOLINK X2000R Gh formSetLg Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formSetLg method faili...

TOTOLINK X2000R Gh formTcpipSetup Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that originates from the formTcpipSetup...

TOTOLINK X2000R Gh formPortFw Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formPortFw method...

TOTOLINK X2000R Gh formMultiAP Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formMultiAP method...

TOTOLINK X2000R Gh formFilter Method Buffer Overflow Vulnerability

The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formFilter method failing to properly validate the length of input data, which can be exploited by an attacker to execute...

TOTOLINK X2000R Gh formIpv6Setup Method Stack Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a Wi-Fi6 router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a stack buffer overflow vulnerability that stems from the formIpv6Setup method failing to properly validate the length size of the input data, which can be exploited by an attacker to...

TOTOLINK X2000R Gh formParentControl Method Buffer Overflow Vulnerability

OTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formParentControl metho...

TOTOLINK X2000R Gh formMultiAPVLAN Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formMultiAPVLAN method...

TOTOLINK X2000R Gh formNtp Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formNtp method failing...

TOTOLINK X2000R Gh formDMZ Method Buffer Overflow Vulnerability

The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formDMZ method failing to properly validate the length and size of input data, which can be exploited by an attacker to execu...

TOTOLINK X2000R Gh formStats Method Buffer Overflow Vulnerability

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formStats method faili...

TOTOLINK A3700R Command Execution Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK A3700R v9.1.2u.616520211012, which can be exploited by an attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function...

TOTOLINK X2000R Gh formDosCfg Method Buffer Overflow Vulnerability

The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formDosCfg method failing to properly validate the length and size of input data, which can be exploited by an attacker to...