CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...

CVE-2021-45736

CVE-2021-45736 affects TOTOLINK X5000R version 9.1.0u.6118_B20201102, with a stack overflow in the setL2tpServerCfg function that enables a Denial of Service via the eip, sip, and server parameters. Public sources (PT-2022-12378) corroborate a stack overflow in this function and suggest a tempora...

CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...

CVE-2021-45738

CVE-2021-45738 affects TOTOLINK X5000R, specifically version 9.1.0u.6118_B20201102. The root cause is a vulnerability in the UploadFirmwareFile function that allows command execution via the FileName parameter. This leads to a high-severity impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) w...

CVE-2021-45741

TOTOLINK X5000R is affected by CVE-2021-45741 due to a stack overflow in the setIpv6Cfg function, exploitable to cause DoS via relay6to4 parameters. Affected product/version: TOTOLINK X5000R v9.1.0u.6118_B20201102. Root cause is a stack overflow in setIpv6Cfg; impact is Denial of Service. Public ...

CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

Totolink X5000R 缓冲区错误漏洞

The TotoLink X5000R is a router from China's Gion Electronics TotoLink. The Totolink X5000R v9.1.0u.6118B20201102 suffers from a buffer error vulnerability that allows an attacker to cause a denial of service DoS via the url parameter...

TotoLink X5000R 命令注入漏洞

Totolink X5000R is a router from China's Gion Electronics Totolink. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by parameterizing the host time...

PT-2022-12383 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: A stack overflow was discovered in the setIpv6Cfg function, allowing attackers to cause a Denial of Service DoS via the relay6to4 parameters. Recommendations: For TOTOLINK X5000R...

PT-2022-12376 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: The issue is related to a stack overflow in the setUrlFilterRules function, allowing attackers to cause a Denial of Service DoS via the url parameter. Recommendations: For TOTOLINK...

Totolink X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router.TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to buffer error, which can be exploited by attackers to cause a denial of service DoS via eip, sip, and server parameters...

Totolink X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the relay6to4 parameter...

TotoLink X5000R 授权问题漏洞

The TotoLink X5000R is a router from China's Gion Electronics TotoLink. The TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from an authorization issue vulnerability that allows attackers to intercept user credentials via packet capture software...

PT-2022-12378 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: A stack overflow was discovered in the setL2tpServerCfg function, allowing attackers to cause a Denial of Service DoS via the eip, sip, server parameters. Recommendations: For TOTOLIN...

TotoLink X5000R 命令注入漏洞

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary commands via the parameter FileName...

Totolink X5000R Operating System Command Injection Vulnerability

Totolink X5000R is a router from China's Gion Electronics Totolink. The TOTOLINK X5000R router suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary operating system commands by sending a modified HTTP request...

Totolink X5000R Operating System Command Injection Vulnerability

Totolink X5000R is a router from China's Gion Electronics Totolink. A security vulnerability exists in Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, which can be exploited by an attacker to compromise the "command" field to attack the The vulnerability can be...

CVE-2021-27710

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...

CVE-2021-27710

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...