CVE-2022-36458

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36464

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

CVE-2022-36461

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

CVE-2022-36460

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

Stack overflow

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...

Stack overflow

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

CVE-2022-36465

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the pppoeUser parameter...

CVE-2022-36464

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

CVE-2022-36463

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

CVE-2022-36461

CVE-2022-36461 affects TOTOLINK A3700R, version 9.1.2u.6134_B20201202. The vulnerability is a command injection in the hostName parameter of the function setOpModeCfg. Several connected records confirm this issue and its association with TOTOLINK A3700R. The NVD entry lists a CVSS v3.1 base score...

CVE-2022-36459

CVE-2022-36459 affects TOTOLINK A3700R (v9.1.2u.6134_B20201202). The vulnerability is a command injection via the host_time parameter in the NTPSyncWithHost function. Public references indicate an in-device command execution path that could allow an attacker with local access to run arbitrary com...

CVE-2022-36460

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

CVE-2022-36458

TOTOLINK A3700R (firmware 9.1.2u.6134_B20201202) contains a command injection in setTracerouteCfg via the command parameter. The CVE-2022-36458 entry notes a local, low-privilege attack with high impact on confidentiality, integrity, and availability. No exploit details or available fixes are pro...

TOTOLINK A3700R 缓冲区错误漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3700R version V9.1.2u.6134B20201202, which stems from a stack overflow issue in the pppoeUser parameter...