CVE-2022-26213

Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26213

Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

Command injection

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-27005

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-27003

Summary: CVE-2022-27003 affects Totolink/ TotoLink X5000R (9.1.0u.6118_B20201102) and A7000R (9.1.0u.6115_B20201022). A command injection flaw exists in the Tunnel 6rd function via the relay6rd parameter, allowing an attacker to execute arbitrary commands through a crafted request. Affected compo...

CVE-2022-27003

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26213

Totolink X5000R firmware version 9.1.0u.6118_B20201102 contains a command injection in setNtpCfg exploited via the tz parameter. A crafted request can lead to arbitrary command execution on the device. Public details across multiple sources describe this vulnerability as affecting the affected fi...

CVE-2022-26213

Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

TotoLink X5000R和TotoLink A7000R 操作系统命令注入漏洞

Totolink X5000R is a router from Totolink, China.TotoLink A7000R is a wireless router from TotoLink, China.Totolink routers X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115 B20201022 contain a security vulnerability that could be exploited by attackers to execute arbitrary commands via crafte...

TOTOLINK X5000R和TOTOLINK A7000R 操作系统命令注入漏洞

Totolink X5000R is a router from Totolink China.TotoLink A7000R is a wireless router from TotoLink China. A security vulnerability exists in the X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 of Totolink routers, which can be exploited by an attacker to execute arbitrary commands v...

PT-2022-6527 · Totolink · Totolink A7000R +1

Name of the Vulnerable Software and Affected Versions: Totolink routers X5000R version 9.1.0u.6118 B20201102 Totolink routers A7000R version 9.1.0u.6115 B20201022 Description: The issue is related to a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This...

TotoLink X5000R 操作系统命令注入漏洞

Totolink X5000R is a router from China-based Jion Electronics Totolink. a command injection vulnerability exists in Totolink X5000R v9.1.0u.6118B20201102, which stems from a failure of the tz parameter in the setNtpCfg function to properly filter the special element of the constructed command. An...

PT-2022-18181 · Totolink · Totolink A7000R +1

Name of the Vulnerable Software and Affected Versions: Totolink routers X5000R version 9.1.0u.6118 B20201102 Totolink routers A7000R version 9.1.0u.6115 B20201022 Description: A command injection issue was discovered in the setWanCfg function via the hostName parameter, allowing attackers to...

PT-2022-17727 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: Totolink X5000R Firmware version 9.1.0u.6118 B20201102 Description: The issue is related to a command injection vulnerability in the setNtpCfg function, specifically via the tz parameters. This allows attackers to execute arbitrary commands b...

TOTOLINK X5000R和TOTOLINK A7000R 操作系统命令注入漏洞

Totolink X5000R is a router from Totolink, China.TotoLink A7000R is a wireless router from TotoLink, China.Totolink routers X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115 B20201022 contain a security vulnerability that allows attackers to execute arbitrary commands via crafted requests...

TOTOLINK X5000R Stack Overflow Vulnerability (CNVD-2022-17120)

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the relay6to4 parameter...

TOTOLINK X5000R Stack Overflow Vulnerability

TOTOLINK X5000R is a router.TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to buffer error, which can be exploited by attackers to cause a denial of service DoS via eip, sip, and server parameters...

TOTOLINK X5000R Stack Overflow Vulnerability

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary commands via the parameter FileName...

Totolink X5000R Command Injection Vulnerability

Totolink X5000R is a router from China's Gion Electronics Totolink. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by parameterizing the host time...

CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...