54 matches found
CVE-2025-45843
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...
CVE-2025-45844
CVE-2025-45844 affects the TOTOLINK NR1800X, specifically firmware version 9.1.0u.6681_B20230703. The vulnerability is an authenticated stack/ buffer overflow in the setWiFiBasicCfg function, triggered by a crafted ssid parameter that fails to validate input length, enabling arbitrary code execut...
CVE-2025-45844
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...
CVE-2025-45845
CVE-2025-45845 affects TOTOLINK NR1800X (v9.1.0u.6681_B20230703). An authenticated stack overflow via the ssid5g parameter in setWiFiEasyGuestCfg is reported, with potential arbitrary code execution or denial of service. Public sources corroborate the component and root cause; PT-Security additio...
CVE-2025-45847
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function...
CVE-2025-45841
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...
CVE-2025-45842
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...
CVE-2025-45843: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...
CVE-2025-45846
The ALFA AIP-W512 wireless router (version v3.2.2.2.3 ) is vulnerable to an authenticated stack overflow . This security flaw originates from the torrentsindex parameter within the formBTClinetSetting function. If successfully exploited, this could lead to a total technical impact on the device. ...
CVE-2025-45842
Summary: CVE-2025-45842 affects TOTOLINK NR1800X. The vulnerability is an authenticated stack overflow in the setWiFiEasyCfg function, triggered by the ssid5g parameter, with input length not properly validated. Affected firmware is 9.1.0u.6681_B20230703. Reported impact is high (CVE/NVD metrics ...
CVE-2025-45841
TOTOLINK NR1800X (version 9.1.0u.6681_B20230703) is affected by an authenticated stack overflow in the setSmsCfg function via the text parameter. Multiple sources describe this as a buffer/stack overflow vulnerability with potential high impact (CVE-2025-45841). Connected documents confirm the af...
CVE-2025-45841
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...
CVE-2025-45846
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function...
CVE-2025-45844
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function...
PT-2025-20394 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid5g parameter in the setWiFiEasyGuestCfg function. This allows for potential exploitation. Recommendations: For...
Rocket Software UniData 和 UniVerse 缓冲区错误漏洞
Rocket Software UniVerse and Rocket Software UniData are both products of Rocket Software, Inc. Rocket Software UniVerse is a suite of database management and support software now owned by Rocket Software. Software UniData is a MultiValue application platform. Rocket Software UniData is a...
CVE-2022-41526
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function...
CVE-2022-41528
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...