CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

CVE-2023-24148

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function...

CVE-2023-24141

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function...

CVE-2023-24143

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function...

CVE-2023-24147

CVE-2023-24147 affects TOTOLINK CA300-PoE router (Firmware v6.2c.884). The root cause is a hardcoded Telnet password stored in /etc/config/product.ini, enabling potential exposure of credentials. Documents describe a hardcoded credential issue and indicate an attacker could disclose sensitive inf...

CVE-2023-24148

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function...

CVE-2023-24142

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function...

CVE-2023-24141

CVE-2023-24141 affects TOTOLINK CA300-PoE (V6.2c.884). The vulnerability is a command injection via the NetDiagPingTimeOut parameter in the setNetworkDiag function. CVSS 3.1 scores indicate a network-accessible, high-severity issue with no user interaction and no privileges required, with impacts...

TOTOLINK CA300-PoE 信任管理问题漏洞

The TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK CA300-PoE version V6.2c.884, which originates from /etc/config/product.ini storing the password for the telnet service...

TOTOLINK CA300-PoE 信任管理问题漏洞

The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which originates from /etc/shadow storing the password of the root account...

CVE-2023-24143

CVE-2023-24143 affects TOTOLINK CA300-PoE (V6.2c.884). A command injection vulnerability exists in the NetDiagTracertHop parameter of the setNetworkDiag function. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, no user interaction required, and impacts to confid...

CVE-2023-24140

CVE-2023-24140 affects TOTOLINK CA300-PoE hardware running V6.2c.884. The issue is a command injection via the NetDiagPingNum parameter in the setNetworkDiag function. Multiple sources corroborate this vulnerability, with a high-severity CVSS v3.1 score (9.8, Network, no authentication, user inte...

PT-2023-1540 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: The issue is related to the use of hardcoded credentials in the /etc/config/product.ini component of the TOTOLINK CA300-PoE router's firmware. This could allow a remote attacker to disclose...