Lucene search
+L

456 matches found

OSV
OSV
added 2024/01/16 5:15 p.m.6 views

CVE-2024-0579

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

9.8CVSS5.6AI score0.02224EPSS
Exploits0References5
NVD
NVD
added 2024/01/16 5:15 p.m.23 views

CVE-2024-0579

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

9.8CVSS7.5AI score0.02224EPSS
Exploits0References5
Prion
Prion
added 2024/01/16 5:15 p.m.21 views

Command injection

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

6.5CVSS7.7AI score0.02224EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/01/16 4:31 p.m.32 views

CVE-2024-0579 Totolink X2000R formMapDelDevice command injection

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

6.5CVSS10AI score0.02224EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/01/16 4:31 p.m.18 views

CVE-2024-0579 Totolink X2000R formMapDelDevice command injection

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

6.5CVSS8.3AI score0.02224EPSS
Exploits0References5
CVE
CVE
added 2024/01/16 4:31 p.m.161 views

CVE-2024-0579

CVE-2024-0579 targets Totolink X2000R 1.0.0-B20221212.1452. The vulnerability resides in the function formMapDelDevice of the file /boafrm/formMapDelDevice , where improper handling of the macstr argument enables remote command injection . Exploitation can be performed remotely, and public disclo...

9.8CVSS8.3AI score0.02224EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.8 views

PT-2024-1173 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: Totolink X2000R version 1.0.0-B20221212.1452 Description: A critical issue is related to the function formMapDelDevice in the /boafrm/formMapDelDevice file, where the manipulation of the macstr argument leads to command injection. This can be...

10CVSS6.7AI score0.02224EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.6 views

TOTOLINK X2000R 命令注入漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X2000R version 1.0.0-B20221212.1452, which stems from the macstr parameter of the formMapDelDevice function of the /boafrm/formMapDelDevice file failing to correctly...

9.8CVSS7.8AI score0.02224EPSS
Exploits0References7
CNVD
CNVD
added 2024/01/12 12:0 a.m.5 views

TOTOLINK X2000R Buffer Overflow Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The Totolink X2000R suffers from a buffer overflow vulnerability that originates from the function formTmultiAP in file /bin/boa failing to properly validate the length size of the input data, which can be exploited by a...

9.8CVSS8.5AI score0.0132EPSS
Exploits1References1
CNVD
CNVD
added 2024/01/11 12:0 a.m.10 views

TOTOLINK X2000R Buffer Overflow Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X2000R X2000RV2 version 2.0.0-B20230727.10434. The vulnerability stems from the formTmultiAP function in file /bin/boa failing to properly validate the length size of th...

9.8CVSS8.3AI score0.01747EPSS
Exploits1References1
OSV
OSV
added 2024/01/09 4:15 p.m.6 views

CVE-2023-7222

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

9.8CVSS6.5AI score0.0132EPSS
Exploits1References3
NVD
NVD
added 2024/01/09 4:15 p.m.26 views

CVE-2023-7222

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

9.8CVSS7.8AI score0.0132EPSS
Exploits1References3
Prion
Prion
added 2024/01/09 4:15 p.m.25 views

Buffer overflow

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

8.3CVSS7.3AI score0.0132EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/09 3:31 p.m.27 views

CVE-2023-7222 Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

8.3CVSS9.8AI score0.0132EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/01/09 3:31 p.m.17 views

CVE-2023-7222 Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

8.3CVSS7AI score0.0132EPSS
Exploits1References3
CVE
CVE
added 2024/01/09 3:31 p.m.54 views

CVE-2023-7222

CVE-2023-7222 affects Totolink X2000R 1.0.0-B20221212.1452. The vulnerability resides in the HTTP POST Request Handler, function formTmultiAP, in /bin/boa, where improper validation of the submit-url length causes a remote buffer overflow. The attack can be initiated over the network without user...

9.8CVSS9.5AI score0.0132EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.6 views

Totolink X2000R 安全漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The Totolink X2000R suffers from a buffer overflow vulnerability that originates from the function formTmultiAP in file /bin/boa failing to properly validate the length size of the input data, which can be exploited by a...

9.8CVSS8.1AI score0.0132EPSS
Exploits1References4
OSV
OSV
added 2024/01/07 7:15 a.m.7 views

CVE-2023-7208

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

9.8CVSS5.9AI score0.01747EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.7 views

TOTOLINK X2000R 安全漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X2000R X2000RV2 version 2.0.0-B20230727.10434. The vulnerability stems from the formTmultiAP function in file /bin/boa failing to properly validate the length size of th...

9.8CVSS8.1AI score0.01747EPSS
Exploits1References4
CNVD
CNVD
added 2024/01/05 12:0 a.m.4 views

TOTOLINK X2000R formRebootSchedule function buffer overflow vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a buffer overflow vulnerability that originates from the failure of the formRebootSchedule function to properly validate the length and size of input data, which can be exploited by an...

9.8CVSS8.6AI score0.00639EPSS
Exploits0References1
Rows per page
Query Builder