681 matches found
CVE-2024-28639
Summary: CVE-2024-28639 affects TOTOLink X5000R (9.1.0u.6118-B20201102) and A7000R (9.1.0u.6115-B20201022). A buffer overflow in the IP field arises from copying the IP field contents in the /www/cgi bin/cstegi.cgi function without length checking, enabling remote code execution and denial of ser...
TOTOLINK X5000R、 A7000R 安全漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in TOTOLINK X5000R and A7000R. An attacker can exploit this vulnerability to cause a denial of service D0S via a command field...
CVE-2024-28639
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field...
CVE-2024-28640
The CVE-2024-28640 entry concerns TOTOLink X5000R (v9.1.0u.6118-B20201102) and A7000R (v9.1.0u.6115-B20201022). Affected component: the command field in the device UI/processing path suffers a Buffer Overflow, enabling a remote attacker to cause a Denial of Service. The reports consistently descr...
TOTOLINK X5000R、A7000R 安全漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability originates from the sub41F7E8 function in the /www/cgi bin/cstegi.cgi file copying the contents of the IP field without checking the data...
CVE-2024-28640
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...
CVE-2024-28640
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service D0S via the command field...
PT-2024-22502 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLink X5000R version 9.1.0u.6118-B20201102 TOTOLink A7000R version 9.1.0u.6115-B20201022 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the command field. Recommendations: For TOTOLink X5000R...
PT-2024-22500 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLink X5000R version 9.1.0u.6118-B20201102 TOTOLink A7000R version 9.1.0u.6115-B20201022 Description: The issue allows remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field. This can be exploited by...
TOTOLINK X5000R Denial of Service Vulnerability
TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
Design/Logic Flaw
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
TOTOLINK X5000R 安全漏洞
TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2024-25468
CVE-2024-25468 affects TOTOLINK X5000R (v9.1.0u.6369_B20230113). The issue is in the NTPSyncWithHost component, where the host_time parameter can be abused by a remote attacker to trigger a denial of service. The available documents describe a high-severity impact (CVSS v3.1 base score 7.5) with ...
CVE-2024-25468
An issue in TOTOLINK X5000R V.9.1.0u.6369B20230113 allows a remote attacker to cause a denial of service via the hosttime parameter of the NTPSyncWithHost component...
The vulnerability of the cstecgi.cgi implementation in TOTOLINK X5000R router microprogramming software allows a perpetrator to execute arbitrary commands.
The vulnerability of the cstecgi.cgi microprogramming system implementation in TOTOLINK X5000R routers is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...