Lucene search
+L

233 matches found

Cvelist
Cvelist
added 2022/08/25 1:53 p.m.32 views

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

8.1AI score0.01046EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/25 1:53 p.m.62 views

CVE-2022-36456

Totolink A720R firmware 4.1.5cu.532_B20210610 contains a command-injection flaw in /cstecgi.cgi caused by insufficient sanitization of the username parameter. This yields potential local command execution. The PT-2022-23380 advisory confirms the affected version and recommends restricting access ...

7.8CVSS7.8AI score0.01046EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/25 12:00 a.m.10 views

TOTOLINK A720R 操作系统命令注入漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that originates from a command injection issue with the username...

7.8CVSS7.6AI score0.01046EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/08/08 12:00 a.m.16 views

TOTOLINK A720R has multiple stack overflow vulnerabilities

TOTOLINK A720R a WIFI amplifier that works as a router. The TOTOLINK A720R suffers from multiple stack overflow vulnerabilities that can be exploited by an attacker to cause a stack overflow...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2022/07/15 12:00 a.m.23 views

TOTOLINK A720R has a hard-coded vulnerability

The TOTOLINK A720R is a wireless router. A hard-coded vulnerability exists in TOTOLINK A720R, which can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2022/04/01 12:00 a.m.41 views

TotoLink EX300_v2 and A720R Resource Management Error Vulnerability

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink A720R is a gigabit dual-band wireless wifi amplifier from TotoLink China.TotoLink EX300v2 and A720R are vulnerable to a resource management error that could be exploited by an attacker to deplete storage space,...

6.5CVSS2.1AI score0.00547EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/31 12:15 a.m.28 views

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

6.5CVSS0.00547EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/31 12:15 a.m.6 views

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

6.5CVSS5.8AI score0.00547EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/31 12:15 a.m.22 views

Input validation

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

3.3CVSS6.5AI score0.00547EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
added 2022/03/30 11:26 p.m.29 views

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

6.8AI score0.00547EPSS
SaveExploits1References1
CVE
CVE
added 2022/03/30 11:26 p.m.102 views

CVE-2021-43662

CVE-2021-43662 affects TotoLink EX300_v2 (V4.0.3c.140_B20210429) and A720R (V4.1.5cu.470_B20200911). Documents describe a resource management error that could be exploited to deplete storage space, causing a DoS condition. No explicit root cause details or remediation are provided in the connecte...

6.5CVSS6.5AI score0.00547EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/30 12:00 a.m.8 views

TotoLink EX300 资源管理错误漏洞

TotoLink EX300 is a 300 Mbps wireless N range extender from TotoLink China.TotoLink A720R is a gigabit dual-band wireless wifi amplifier from TotoLink China.TotoLink EX300v2 and A720R are vulnerable to a resource management error that could be exploited by an attacker to deplete storage space,...

6.5CVSS5.5AI score0.00547EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/02/21 12:00 a.m.38 views

TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17121)

TOTOLINK A720R is a wireless router.TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the flag parameter...

7.8CVSS5.3AI score0.01175EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/21 12:00 a.m.36 views

TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17123)

TOTOLINK A720R is a wireless router. TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via host parameters...

7.8CVSS5.1AI score0.01175EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/21 12:00 a.m.30 views

Multiple TOTOLink product command injection vulnerabilities

TOTOLink A3100R is a wireless router. TOTOLink A830R is a wireless dual-band router.TOTOLink A720R is a wireless router. Several TOTOLink products are vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the IpFrom parameter...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.44 views

Totolink A720R Command Injection Vulnerability

TOTOLINK A720R is a router device. An input validation vulnerability exists in TOTOLINK A720R Main's handling of QUERYSTRING, which can be exploited by a remote attacker to submit a special request that can be used to execute arbitrary commands in the application context...

10CVSS9.8AI score0.03069EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/10 12:00 a.m.21 views

TOTOLINK A720R setWiFiWpsStart Buffer Overflow Vulnerability

TOTOLINK A720R is a router device. A buffer overflow vulnerability exists in the TOTOLINK A720R setWiFiWpsStart, which can be exploited by a remote attacker to submit a special request that can be used in the application context to execute arbitrary code or crash the application...

9.8CVSS9.8AI score0.01363EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/04 2:15 a.m.18 views

CVE-2021-45740

TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service DoS via the pin parameter...

9.8CVSS0.01363EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/04 2:15 a.m.33 views

CVE-2021-45742

TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

10CVSS0.03069EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/04 2:15 a.m.24 views

CVE-2021-45739

TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a stack overflow in the FormLogin function. This vulnerability allows attackers to cause a Denial of Service DoS via the flag parameter...

7.8CVSS0.01175EPSS
SaveExploits1References1
Rows per page
Query Builder