675 matches found
Stack overflow
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule...
CVE-2023-45984
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
CVE-2023-36950
CVE-2023-36950 affects TOTOLINK X5000R (v9.1.0u.6118_B20201102) and TOTOLINK A7000R (v9.1.0u.6115_B20201022). The vulnerability is a stack overflow in the loginAuth function, triggered by the http_host parameter due to inadequate input validation/size checks. Exploitation could lead to arbitrary ...
CVE-2023-45984
The CVE-2023-45984 entry affects TOTOLINK X5000R (v9.1.0u.6118_B20201102) and TOTOLINK A7000R (v9.1.0u.6115_B20201022). All connected sources describe a stack overflow in setLanguageCfg() triggered via the lang parameter, exposing potential arbitrary code execution on affected routers. Public sum...
CVE-2023-36950
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the httphost parameter in the function loginAuth...
TOTOLINK X5000R和TOTOLINK A7000R 缓冲区错误漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A stack overflow vulnerability exists in the TOTOLINK X5000R and A7000R UploadCustomModule function, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...
CVE-2023-36947
Totolink X5000R (v9.1.0u.6118_B20201102) and TOTOLINK A7000R (v9.1.0u.6115_B20201022) contain a stack overflow in the UploadCustomModule function, exploitable via the File parameter. Multiple sources attribute high-severity impact (potential arbitrary code execution or denial of service) to this ...
TOTOLINK X5000R和A7000R 缓冲区错误漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. TOTOLINK X5000R and A7000R setLanguageCfg function stack overflow vulnerability can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...
CVE-2023-45985
CVE-2023-45985 affects TOTOLINK X5000R (9.1.0u.6118_B20201102) and TOTOLINK A7000R (9.1.0u.6115_B20201022). A stack overflow in the function setParentalRules can be exploited to cause a Denial of Service via a crafted POST request. This is confirmed across multiple sources (CNVD/CNNVD/NVD/PRION e...
CVE-2023-45984
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
PT-2023-9688 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: The issue is related to a stack overflow in the setParentalRules function, which can be exploited by attackers to cause a Denial of Servi...
CVE-2023-36947
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule...
CVE-2023-36950
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the httphost parameter in the function loginAuth...
PT-2023-25751 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A stack overflow issue was discovered via the http host parameter in the loginAuth function. This issue affects the login authentication...
PT-2023-29780 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A stack overflow issue was discovered via the lang parameter in the setLanguageCfg function. This issue affects the specified versions of...
TOTOLINK X5000R和TOTOLINK A7000R 缓冲区错误漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability stems from the failure of the httphost parameter in the loginAuth function to correctly validate the length and size of the input data, whi...
CVE-2023-45985
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
TOTOLINK X5000R和TOTOLINK A7000R 缓冲区错误漏洞
TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A stack overflow vulnerability exists in the TOTOLINK X5000R and A7000R setParentalRules function, which can be exploited by an attacker to trigger a denial of service DoS via a specially crafted POST request...
PT-2023-25749 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A stack overflow issue was discovered via the File parameter in the UploadCustomModule function. This issue affects the specified version...
TOTOLINK X5000R setLanguageCfg Function Code Execution Vulnerability
TOTOLINK X5000R is a wireless router from TOTOLINK that supports Wi-Fi 6 technology with full coverage Mesh system and dual band transmission. The TOTOLINK X5000R suffers from a code execution vulnerability that stems from the lang parameter of the setLanguageCfg function failing to properly filt...