NETGEAR EX8000 action_wireless command injection vulnerability

The NETGEAR EX8000 is a tri-band WiFi wireless extender , which is mainly used to extend WiFi coverage, eliminate WiFi dead spots, and provide faster network speeds. The NETGEAR EX8000 suffers from a command injection vulnerability that originates from the Iface parameter in the actionwireless...

CVE-2025-2370

TOTOLINK EX1800T (up to 9.1.0cu.2112_B20220316 and earlier) is affected by CVE-2025-2370. The vulnerability is in the setWiFiExtenderConfig function in /cgi-bin/cstecgi.cgi, where manipulating the apcliSsid parameter triggers a stack-based buffer overflow. It can be exploited remotely and the exp...

CVE-2025-2094

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

TOTOLINK EX1800T 安全漏洞

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability, which stems from the incorrect operation of the function setWiFiExtenderConfig parameter apcliKey and key, and no detailed vulnerability details...

TP-LINK TL-WPA8630P 安全漏洞

TP-LINK TL-WPA8630P is a WIFI extender from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WPA8630P that stems from a command injection vulnerability in the devpwd parameter of the sub4256CC function...

P&L Technology Limited RE365 Buffer Overflow Vulnerability

RE365 is a WiFi range extender from China's TP-LINK. A buffer overflow vulnerability exists in the RE365 V1180213 version of TP-LINK Technologies Ltd. The vulnerability stems from the lack of length validation of the /usr/bin/httpd.USERAGENT field, which can be exploited by an attacker to cause a...

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a attacker to perform XSS attacks.

The vulnerability of the setWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

TOTOLINK EX200 setWiFiExtenderConfig method ssid parameter cross-site scripting vulnerability

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A cross-site scripting vulnerability exists in the TOTOLINK EX200, which stems from the...

TOTOLINK EX200 setWiFiExtenderConfig method key parameter cross-site scripting vulnerability

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...

CVE-2024-32325

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

TOTOLINK EX200 安全漏洞

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...

CVE-2024-31812

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

Tenda A15 mac parameter buffer overflow vulnerability

Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the mac parameter of the /goform/SetOnlineDevName file failing to correctly validate the length of the input data, and can be exploited by a remote attacke...

Tenda A15 wpapsk_crypto2_4g parameter buffer overflow vulnerability

Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the wpapskcrypto24g parameter of the /goform/WifiExtraSet file that fails to correctly validate the length of the input data, and can be exploited by a...

Tenda A15 deviceList Parameter Buffer Overflow Vulnerability

Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the deviceList parameter of the /goform/setBlackRule file failing to correctly validate the length of the input data, and can be exploited by a remote...

Tenda A15 安全漏洞

Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the wpapskcrypto24g parameter of the /goform/WifiExtraSet file that fails to correctly validate the length of the input data, and can be exploited by a...

CVE-2023-51028

TOTOLINK EX1800T 9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi...

Command injection

TOTOlink EX1800T V9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi...

PT-2023-31742 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns unauthorized arbitrary command execution. It is related to the apcliAuthMode parameter in the "setWiFiExtenderConfig" interface of the "cstecgi .cgi"...