PT-2024-24530 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found via the port parameter in the setSSServer function at "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version 9.1.0cu.23...

PT-2024-24532 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found, related to the setSSServer function, specifically via the password parameter. Recommendations: For TOTOLINK X5000R version 9.1.0cu.2350 B20230313...

PT-2024-24528 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an authenticated remote command execution via the mru parameter in the cstecgi.cgi binary. This allows for potential exploitation, but details about the...

PT-2024-24531 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found in the setSSServer function via the timeout parameter at the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version...

PT-2024-3479 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to a command injection via the disconnectVPN function. It is caused by the lack of input data sanitization measures in the TOTOLINK X5000R router's firmware...

TOTOLINK X5000R and A7000R Buffer Overflow Vulnerability

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability originates from the sub41F7E8 function in the /www/cgi bin/cstegi.cgi file copying the contents of the IP field without checking the data...

TOTOLINK X5000R and A7000R Buffer Overflow Vulnerability (CNVD-2024-42443)

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in TOTOLINK X5000R and A7000R. An attacker can exploit this vulnerability to cause a denial of service D0S via a command field...

CVE-2024-28639

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field...

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...

TOTOLINK X5000R、A7000R 安全漏洞

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability originates from the sub41F7E8 function in the /www/cgi bin/cstegi.cgi file copying the contents of the IP field without checking the data...

CVE-2024-28639

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field...

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...

CVE-2024-28640

The CVE-2024-28640 entry concerns TOTOLink X5000R (v9.1.0u.6118-B20201102) and A7000R (v9.1.0u.6115-B20201022). Affected component: the command field in the device UI/processing path suffers a Buffer Overflow, enabling a remote attacker to cause a Denial of Service. The reports consistently descr...

TOTOLINK X5000R、 A7000R 安全漏洞

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in TOTOLINK X5000R and A7000R. An attacker can exploit this vulnerability to cause a denial of service D0S via a command field...

CVE-2024-28639

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field...

CVE-2024-28639

Summary: CVE-2024-28639 affects TOTOLink X5000R (9.1.0u.6118-B20201102) and A7000R (9.1.0u.6115-B20201022). A buffer overflow in the IP field arises from copying the IP field contents in the /www/cgi bin/cstegi.cgi function without length checking, enabling remote code execution and denial of ser...

PT-2024-22500 · Totolink · Totolink X5000R +1

Name of the Vulnerable Software and Affected Versions: TOTOLink X5000R version 9.1.0u.6118-B20201102 TOTOLink A7000R version 9.1.0u.6115-B20201022 Description: The issue allows remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field. This can be exploited by...

PT-2024-22502 · Totolink · Totolink X5000R +1

Name of the Vulnerable Software and Affected Versions: TOTOLink X5000R version 9.1.0u.6118-B20201102 TOTOLink A7000R version 9.1.0u.6115-B20201022 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the command field. Recommendations: For TOTOLink X5000R...