783 matches found
CVE-2021-45735
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...
CVE-2021-45734
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...
CVE-2021-45733
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...
CVE-2021-45733
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...
Command injection
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...
Stack overflow
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...
Design/Logic Flaw
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...
Command injection
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...
Stack overflow
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...
Stack overflow
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...
CVE-2021-45733
Affected product: TOTOLINK X5000R (firmware v9.1.0u.6118_B20201102). Vulnerability: Command injection in the NTPSyncWithHost function, exploitable via the host_time parameter. This allows an attacker to execute arbitrary commands. The CVE entry and multiple catalogs (NVD, CNVD, CNNVD, CVE List) c...
CVE-2021-45733
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...
CVE-2021-45734
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...
CVE-2021-45734
CVE-2021-45734 affects TOTOLINK X5000R (v9.1.0u.6118_B20201102). The vulnerability is a stack overflow in the setUrlFilterRules function that can cause a Denial of Service via the url parameter. Public documents do not describe an exploit in the wild beyond this root cause. PT-Security notes a te...
CVE-2021-45735
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...
CVE-2021-45735
CVE-2021-45735 affects TOTOLINK X5000R, specifically v9.1.0u.6118_B20201102. The vulnerability results from the device using the HTTP protocol for admin interface authentication, enabling credential interception via packet capture and exposure of user credentials. Root cause: credential input is ...
CVE-2021-45736
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...
CVE-2021-45736
CVE-2021-45736 affects TOTOLINK X5000R version 9.1.0u.6118_B20201102, with a stack overflow in the setL2tpServerCfg function that enables a Denial of Service via the eip, sip, and server parameters. Public sources (PT-2022-12378) corroborate a stack overflow in this function and suggest a tempora...
CVE-2021-45738
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...
CVE-2021-45738
CVE-2021-45738 affects TOTOLINK X5000R, specifically version 9.1.0u.6118_B20201102. The root cause is a vulnerability in the UploadFirmwareFile function that allows command execution via the FileName parameter. This leads to a high-severity impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) w...