CVE-2023-33487

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter...

TOTOLINK X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X5000R versions V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113, which stems from the presence of a post-authentication buffer overflow in the addEffect function via the parameters...

TOTOLINK X5000R 命令注入漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X5000R version V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113, which stems from the presence of a command injection vulnerability that allows an attacker to execute arbitrary...

CVE-2022-26213

Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

PT-2022-12378 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: A stack overflow was discovered in the setL2tpServerCfg function, allowing attackers to cause a Denial of Service DoS via the eip, sip, server parameters. Recommendations: For TOTOLIN...

PT-2022-12376 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: The issue is related to a stack overflow in the setUrlFilterRules function, allowing attackers to cause a Denial of Service DoS via the url parameter. Recommendations: For TOTOLINK...