PT-2022-12028 · Totolink · Totolink A720R +2

Name of the Vulnerable Software and Affected Versions: Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A830R version 5.9c.4729 B20191112 Totolink A720R version 4.1.5cu.470 B20200911 Description: A stack overflow was discovered in the setNoticeCfg function, allowing attackers to cause a...

CVE-2021-44247: Improper Neutralization of Special Elements used in a Command

Totolink devices A3100R v4.1.2cu.5050B20200504, A830R v5.9c.4729B20191112, and A720R v4.1.5cu.470B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter...