Lucene search
+L

110 matches found

ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.4 views

CVE-2022-26206

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...

9.8CVSS6.1AI score0.02218EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/15 10:15 p.m.6 views

CVE-2022-26210

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

9.8CVSS7.5AI score0.05693EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.20 views

CVE-2022-26212

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceM...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References2
CVE
CVE
added 2022/03/15 9:56 p.m.126 views

CVE-2022-26212

Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R routers are affected by a command-injection vulnerability in the setDeviceName function, exploitable via deviceMac and deviceName parameters to execute arbitrary commands. Affected models and firmware variants are listed in multiple source...

9.8CVSS9.9AI score0.02779EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/03/15 9:56 p.m.317 views

CVE-2022-26210

CVE-2022-26210 is a command-injection vulnerability in Totolink routers (A830R, A3100R, A950RG, A800R, A3000RU, A810R) in the setUpgradeFW function, exploitable via the FileName parameter. The affected firmware variants (e.g., A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4....

9.8CVSS9.9AI score0.05693EPSS
SaveIn wildExploits1References1Affected Software1
CVE
CVE
added 2022/03/15 9:56 p.m.120 views

CVE-2022-26209

CVE-2022-26209 affects Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R devices. A command injection exists in the setUploadSetting function via the FileName parameter, enabling arbitrary command execution by crafted requests. Connected advisories corroborate a router-wide vulnerability ...

9.8CVSS9.9AI score0.02218EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.9 views

多款TotoLink产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02218EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.8 views

PT-2022-17725 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.8AI score0.02779EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.17 views

多款TOTOLINK产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.10 views

多款TOTOLINK产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02218EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.7 views

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

9.8CVSS10AI score0.05693EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.9 views

PT-2022-17724 · Totolink · Totolink A810R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.9AI score0.02218EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.16 views

PT-2022-17728 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.8AI score0.02779EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.11 views

多款TotoLink产品 操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

9.8CVSS6.1AI score0.02779EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/02/28 12:00 a.m.83 views

TOTOLink A830R Command Injection Vulnerability

TOTOLink A830R is a wireless dual-band router from TotoLink, China.TOTOLink A830R V5.9c.4729B20191112 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS6.8AI score0.03189EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.87 views

CVE-2022-25080

TOTOLink A830R V5.9c.4729B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS7.6AI score0.03189EPSS
SaveIn wildExploits1References2
OSV
OSV
added 2022/02/24 3:15 p.m.20 views

CVE-2022-25080

TOTOLink A830R V5.9c.4729B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS7.5AI score0.03189EPSS
SaveExploits1References1
Prion
Prion
added 2022/02/24 3:15 p.m.24 views

Command injection

TOTOLink A830R V5.9c.4729B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

7.5CVSS10AI score0.03189EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.27 views

TotoLink A830R 操作系统命令注入漏洞

TOTOLink A830R is a wireless dual-band router from TotoLink, China.TOTOLink A830R V5.9c.4729B20191112 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS6AI score0.03189EPSS
SaveExploits1References2
CVE
CVE
added 2022/02/22 10:44 p.m.204 views

CVE-2022-25080

CVE-2022-25080 affects TOTOLink A830R firmware, specifically version V5.9c.4729_B20191112, where the vulnerability is a command injection in the Main function. The issue allows remote attackers to execute arbitrary commands via the QUERY_STRING parameter, with impact described as potential remote...

9.8CVSS9.9AI score0.03189EPSS
SaveIn wildExploits1References1Affected Software1
Rows per page
Query Builder