CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...

CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...

CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

Stack overflow

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...

Command injection

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...

Stack overflow

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

Command injection

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...

Stack overflow

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...

Design/Logic Flaw

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...

CVE-2021-45733

Affected product: TOTOLINK X5000R (firmware v9.1.0u.6118_B20201102). Vulnerability: Command injection in the NTPSyncWithHost function, exploitable via the host_time parameter. This allows an attacker to execute arbitrary commands. The CVE entry and multiple catalogs (NVD, CNVD, CNNVD, CVE List) c...

CVE-2021-45734

CVE-2021-45734 affects TOTOLINK X5000R (v9.1.0u.6118_B20201102). The vulnerability is a stack overflow in the setUrlFilterRules function that can cause a Denial of Service via the url parameter. Public documents do not describe an exploit in the wild beyond this root cause. PT-Security notes a te...

CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...

CVE-2021-45735

CVE-2021-45735 affects TOTOLINK X5000R, specifically v9.1.0u.6118_B20201102. The vulnerability results from the device using the HTTP protocol for admin interface authentication, enabling credential interception via packet capture and exposure of user credentials. Root cause: credential input is ...

CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...

CVE-2021-45736

CVE-2021-45736 affects TOTOLINK X5000R version 9.1.0u.6118_B20201102, with a stack overflow in the setL2tpServerCfg function that enables a Denial of Service via the eip, sip, and server parameters. Public sources (PT-2022-12378) corroborate a stack overflow in this function and suggest a tempora...