Lucene search
+L

59 matches found

Vulnrichment
Vulnrichment
added 2023/02/14 12:0 a.m.6 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8AI score0.0192EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.5 views

TOTOLINK CA300-PoE 命令注入漏洞

The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which originates from the discovery of a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8CVSS8.5AI score0.0192EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/02/14 12:0 a.m.29 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

10AI score0.0192EPSS
Exploits1References1
CVE
CVE
added 2023/02/14 12:0 a.m.54 views

CVE-2023-24161

Totolink CA300-PoE V6.2c.884 is affected by a command-injection vulnerability in the webWlanIdx parameter of the setWebWlanIdx function. The CVE-2023-24161 entry reports a high-severity (CRITICAL) issue with network-based access and no user interaction required; root cause is command injection vi...

9.8CVSS9.7AI score0.0192EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.6 views

PT-2023-19449 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A command injection issue was discovered via the webWlanIdx parameter in the setWebWlanIdx function. This allows for potential command injection attacks. Recommendations: For TOTOLINK CA300-PoE...

9.8CVSS9.7AI score0.0192EPSS
Exploits1References3
CNVD
CNVD
added 2022/05/12 12:0 a.m.47 views

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53558)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS3.6AI score0.02492EPSS
Exploits1References1
NVD
NVD
added 2022/05/10 2:15 p.m.25 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS0.02492EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/10 2:15 p.m.2 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS7.2AI score0.02492EPSS
Exploits1References2
OSV
OSV
added 2022/05/10 2:15 p.m.4 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

9.8CVSS7.3AI score0.02492EPSS
Exploits1References1
Prion
Prion
added 2022/05/10 2:15 p.m.20 views

Command injection

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS9.7AI score0.02492EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/10 1:17 p.m.34 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10AI score0.02492EPSS
Exploits1References1
CVE
CVE
added 2022/05/10 1:17 p.m.109 views

CVE-2022-28909

Totolink N600R v5.3c.7159_B20190425 is affected by a command injection in the webwlanidx parameter of the /setting/setWebWlanIdx API. The issue is documented across multiple sources (CVE-2022-28909 and related advisories) and is classified as a high/critical risk with network attack vector, no pr...

10CVSS9.8AI score0.02492EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/10 12:0 a.m.9 views

PT-2022-19304 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was found via the webwlanidx parameter in the "/setting/setWebWlanIdx" API endpoint. This allows for potential exploitation. Recommendations: For TOTOLink N600R...

10CVSS9.5AI score0.02492EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.6 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS8.5AI score0.02492EPSS
Exploits1References2
OSV
OSV
added 2022/03/15 10:15 p.m.9 views

CVE-2022-26208

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

9.8CVSS7.5AI score0.02806EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.7 views

CVE-2022-26208

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

9.8CVSS6.1AI score0.02806EPSS
Exploits1References2
Prion
Prion
added 2022/03/15 10:15 p.m.19 views

Command injection

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

7.5CVSS9.9AI score0.02806EPSS
Exploits1References1Affected Software6
Cvelist
Cvelist
added 2022/03/15 9:56 p.m.32 views

CVE-2022-26208

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

10AI score0.02806EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/03/15 12:0 a.m.13 views

PT-2022-17723 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.7AI score0.02806EPSS
Exploits1References3
Rows per page
Query Builder