CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

CVE-2021-45741

TOTOLINK X5000R is affected by CVE-2021-45741 due to a stack overflow in the setIpv6Cfg function, exploitable to cause DoS via relay6to4 parameters. Affected product/version: TOTOLINK X5000R v9.1.0u.6118_B20201102. Root cause is a stack overflow in setIpv6Cfg; impact is Denial of Service. Public ...

PT-2022-12383 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: A stack overflow was discovered in the setIpv6Cfg function, allowing attackers to cause a Denial of Service DoS via the relay6to4 parameters. Recommendations: For TOTOLINK X5000R...

PT-2022-12378 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: A stack overflow was discovered in the setL2tpServerCfg function, allowing attackers to cause a Denial of Service DoS via the eip, sip, server parameters. Recommendations: For TOTOLIN...

CVE-2021-45734: Undefined Security Weakness

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via the url parameter...

CVE-2021-45735: Cleartext Transmission of Sensitive Information

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software...

CVE-2021-45736: Undefined Security Weakness

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...

PT-2022-12375

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description A command injection issue was found in the NTPSyncWithHost function, allowing attackers to execute arbitrary commands via the host time parameter. Recommendations For TOTOLINK X5000R...

PT-2022-12377

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description The issue allows attackers to intercept user credentials via packet capture software because it uses the HTTP protocol for authentication into the admin interface. Recommendations For...

Totolink X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the relay6to4 parameter...

TotoLink X5000R 授权问题漏洞

The TotoLink X5000R is a router from China's Gion Electronics TotoLink. The TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from an authorization issue vulnerability that allows attackers to intercept user credentials via packet capture software...

Totolink X5000R 缓冲区错误漏洞

TOTOLINK X5000R is a router.TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to buffer error, which can be exploited by attackers to cause a denial of service DoS via eip, sip, and server parameters...

Totolink X5000R 缓冲区错误漏洞

The TotoLink X5000R is a router from China's Gion Electronics TotoLink. The Totolink X5000R v9.1.0u.6118B20201102 suffers from a buffer error vulnerability that allows an attacker to cause a denial of service DoS via the url parameter...

TotoLink X5000R 命令注入漏洞

Totolink X5000R is a router from China's Gion Electronics Totolink. TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by parameterizing the host time...

TotoLink X5000R 命令注入漏洞

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary commands via the parameter FileName...

CVE-2021-45738: Improper Neutralization of Special Elements used in a Command

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName...

PT-2022-12380

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description A command injection issue was found in the UploadFirmwareFile function, allowing attackers to execute arbitrary commands via the FileName parameter. Recommendations For TOTOLINK X5000R...

PT-2022-12376 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 Description: The issue is related to a stack overflow in the setUrlFilterRules function, allowing attackers to cause a Denial of Service DoS via the url parameter. Recommendations: For TOTOLINK...

CVE-2021-45741: Undefined Security Weakness

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service DoS via the relay6to4 parameters...

CVE-2021-45733: Improper Neutralization of Special Elements used in a Command

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime...