590 matches found
CVE-2023-48810
CVE-2023-48810 affects TOTOLINK X6000R (V9.4.0cu.852_B20230719). The shttpd service’s sub_4119A0 uses front-end fields via Uci_Set_The_Str passed to CsteSystem, creating a command execution vulnerability. Public details in connected sources describe a remote command-injection risk with high impac...
CVE-2023-48803
CVE-2023-48803 affects TOTOLINK X6000R V9.4.0cu.852_B20230719. The shttpd component’s sub_4119A0 routine obtains fields from the front-end via Uci_Set_The_Str and passes them to CsteSystem, enabling command execution on the device. CVSS v3.1 metrics indicate network access, no privileges, no user...
CVE-2023-48810
In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...
TOTOLINK X6000R Access Control Error Vulnerability
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from improper access control of the device and can be exploited by an attacker to reset the login password and WI...
TOTOLINK X6000R Command Execution Vulnerability
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from the enable parameter of the setLedCfg function failing to correctly filter construct command special...
TOTOLINK X6000R setLedCfg Function Code Execution Vulnerability
TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...
TOTOLINK X6000R setTracerouteCfg function code execution vulnerability
TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...
CVE-2023-46484
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...
CVE-2023-46484
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...
CVE-2023-46485
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...
CVE-2023-46485
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...
CVE-2023-46484
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...
CVE-2023-46485
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...
Code injection
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...
Code injection
An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...
CVE-2023-46979
TOTOLINK X6000R V9.4.0cu.852B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function...
CVE-2023-46978
TOTOLINK X6000R V9.4.0cu.852B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication...
CVE-2023-46979
TOTOLINK X6000R V9.4.0cu.852B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function...