Code injection

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

CVE-2022-40110

CVE-2022-40110 affects TOTOLINK A3002R (TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The vulnerability is a buffer overflow via /bin/boa, with NVD indicating a CVSS v3.1 base score of 7.5 (High) and network attack vector with no privileges required. Multiple connected sources corroborate the existe...

CVE-2022-40109

The CVE-2022-40109 entry concerns the TOTOLINK A3002R router (firmware TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The vulnerability is insecure permissions via the /bin/boa binary, affecting the device’s security at the level of file/command permissions. CVSS 3.1/CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's Gion Electronics TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. A security vulnerability exists in the TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 version, which stems from being vulnerable ...

CVE-2022-40110: Buffer Copy without Checking Size of Input

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa...

CVE-2022-40109: Incorrect Default Permissions

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

CVE-2022-40112: Buffer Copy without Checking Size of Input

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

PT-2022-25213 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 Description: The issue is related to a Buffer Overflow vulnerability via /bin/boa. This vulnerability can be exploited, potentially allowing unauthorized access or control...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's Gion Electronics TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. A security vulnerability exists in the TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 version, which stems from vulnerability to...

mariadb: assertion failures in decimal_bin_size

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...

CVE-2022-36552

CVE-2022-36552 affects Tenda AC6 (AC1200) with v5.0 firmware

CVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...

CVE-2022-32548

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field...

CVE-2022-36553: Improper Neutralization of Special Elements used in a Command

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...

CVE-2022-32548: Buffer Copy without Checking Size of Input

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field...

CVE-2022-32993: Undefined Security Weakness

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...

PT-2022-7699

Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description The issue is related to the hnap main function of the D-Link GO-RT-AC750 router's firmware, which fails to neutralize special elements used in an...

Ubuntu: Security Advisory (USN-48-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-9-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-14-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...