Lucene search
+L

96 matches found

CVE
CVE
added 2022/03/15 9:56 p.m.120 views

CVE-2022-26209

CVE-2022-26209 affects Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R devices. A command injection exists in the setUploadSetting function via the FileName parameter, enabling arbitrary command execution by crafted requests. Connected advisories corroborate a router-wide vulnerability ...

9.8CVSS9.9AI score0.02218EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.8 views

PT-2022-17725 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.8AI score0.02779EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.9 views

多款TotoLink产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02218EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.7 views

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

9.8CVSS10AI score0.05693EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.9 views

PT-2022-17724 · Totolink · Totolink A810R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.9AI score0.02218EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.17 views

多款TOTOLINK产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.16 views

PT-2022-17728 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.8AI score0.02779EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.11 views

多款TotoLink产品 操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/02/28 12:00 a.m.42 views

TOTOLink A3000RU Command Injection Vulnerability

TOTOLink A3000RU is a wireless router from TotoLink, China.TOTOLink A3000RU V5.9c.2280B20180512 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS6.8AI score0.54071EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.109 views

CVE-2022-25075

TOTOLink A3000RU V5.9c.2280B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS7.7AI score0.54071EPSS
SaveIn wildExploits1References2
OSV
OSV
added 2022/02/24 3:15 p.m.8 views

CVE-2022-25075

TOTOLink A3000RU V5.9c.2280B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS7.8AI score0.54071EPSS
SaveExploits1References1
Prion
Prion
added 2022/02/24 3:15 p.m.26 views

Command injection

TOTOLink A3000RU V5.9c.2280B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

7.5CVSS10AI score0.54071EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.10 views

TOTOLINK A3000Ru 操作系统命令注入漏洞

TOTOLink A3000RU is a wireless router from TotoLink, China.TOTOLink A3000RU V5.9c.2280B20180512 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS6AI score0.54071EPSS
SaveExploits1References2
CVE
CVE
added 2022/02/22 10:44 p.m.250 views

CVE-2022-25075

CVE-2022-25075 affects TOTOLink A3000RU (V5.9c.2280_B20180512). A command‑injection vulnerability in the "Main" function allows execution of arbitrary commands via the QUERY_STRING parameter. Multiple sources (NVD, CNVD, CVE lists, vendor advisories) corroborate the flaw and its impact, which is ...

9.8CVSS9.9AI score0.54071EPSS
SaveIn wildExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/22 10:44 p.m.51 views

CVE-2022-25075

TOTOLink A3000RU V5.9c.2280B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

10AI score0.54071EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/02/22 12:00 a.m.8 views

PT-2022-2961

Name of the Vulnerable Software and Affected Versions TOTOLink A3000RU version V5.9c.2280 B20180512 Description The issue is related to a command injection vulnerability in the "Main" function, which is caused by insufficient argument checking. This allows attackers to execute arbitrary commands...

10CVSS8.9AI score0.54071EPSS
SaveExploits1References11
Rows per page
Query Builder