CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

PT-2022-21325 · Totolink · Totolink Ex300 V2

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX300 V2 version 4.0.3c.7484 Description: A command injection issue was found via the langType parameter in the setLanguageCfg function. This issue can be exploited through a crafted MQTT data packet. Recommendations: For TOTOLINK...

TOTOLINK EX300 Command Injection Vulnerability

The TOTOLINK EX300 is a 300 Mbps wireless N-range extender from China's TOTOLINK. A security vulnerability exists in TOTOLINK EX300V2 version V4.0.3c.7484, which originates from a command injection vulnerability found via the langType parameter in the setLanguageCfg function...

CVE-2021-43663

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component cloudupdatecheck...

CVE-2021-43661

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /home.asp...

CVE-2021-43661

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /home.asp...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

PT-2022-17042

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 totolink EX1200T version 4.1.2cu.5230 B20210706 Description The issue is related to the lack of an authentication mechanism in the affected devices. Recommendations For totolink EX300 v2 version...

TotoLink EX300 command injection vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink EX300v2 V4.0.3c.140B20210429 is vulnerable to command injection, which can be exploited by unauthenticated attackers to remotely execute code as root via MitM attack...

TotoLink EX300 Access Control Vulnerability

TOTOLINK EX300 is a 300 Mbps wireless N range extender from TotoLink, China, and TOTOLINK EX1200T is a Wi-Fi range extender from Gion Electronics TOTOLINK, China.An access control error vulnerability exists in TOTOLINK EX300v2 and EX1200T. The vulnerability stems from the fact that the device web...

TotoLink EX300 Resource Management Error Vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink A720R is a gigabit dual-band wireless wifi amplifier from TotoLink China.TotoLink EX300v2 and A720R are vulnerable to a resource management error that could be exploited by an attacker to deplete storage space,...

TotoLink EX300 Cross-site Scripting Vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China. version TotoLink EX300v2 V4.0.3c.140B20210429 has a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...

PT-2022-11883

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description A command injection issue was found in the cloudupdate check component, which could potentially be exploited. Recommendations For version 4.0.3c.140 B20210429, consider restricting...

PT-2022-11882

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version V4.0.3c.140 B20210429 totolink A720R version V4.1.5cu.470 B20200911 Description The issue causes uncontrolled resource consumption. Recommendations For totolink EX300 v2 version V4.0.3c.140 B20210429, at the moment,...

PT-2022-11881

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description A reflected cross-site scripting XSS issue was found in the /home.asp component. Recommendations For version 4.0.3c.140 B20210429, as a temporary workaround, consider restricting acces...

PT-2022-11884

Name of the Vulnerable Software and Affected Versions totolink EX300 v2 version 4.0.3c.140 B20210429 Description The issue is related to a command injection vulnerability via the component process forceugpo. Recommendations For totolink EX300 v2 version 4.0.3c.140 B20210429, consider disabling th...