CVE-2024-0575

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attac...

CVE-2024-0574

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sTime leads to stack-based buffer overflow. The attack may be launched remotel...

CVE-2024-0571

A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619B20230130. This issue affects the function setSmsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument text leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2024-0569

A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.83320220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to...

PT-2024-15663

Name of the Vulnerable Software and Affected Versions Totolink N350RT version 9.3.5u.6265 Description A critical vulnerability was found in the Setting Handler component, affecting unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls, and the attack ca...

CVE-2024-0570: Improper Access Control

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended t...

CVE-2024-0576: Stack-based Buffer Overflow

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sPort leads to stack-based buffer overflow. The attack can be...

CVE-2024-0569: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.83320220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to...

CVE-2024-0578: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2024-0573: Stack-based Buffer Overflow

A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launche...

CVE-2024-0575: Stack-based Buffer Overflow

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attac...

Totolink N350RT Router Code Execution

The vulnerability of the main function /cgi-bin/cstecgi.cgi?action=login&flag=1 of the Totolink N350RT router’s software is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TOTOLINK N350RT Code Execution

The vulnerability of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 in the microprogramming software for TOTOLINK N350RT routers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Totolink N200RE Router Code Execution

The vulnerability of the setDiagnosisCfg function /cgi-bin/cstecgi.cgi in the Totolink N200RE router software exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Totolink N200RE Router UploadFirmwareFile Code Execution

The vulnerability of the UploadFirmwareFile function /cgi-bin/cstecgi.cgi in the Totolink N200RE router microprogramming system exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Totolink N350RT Router Code Execution

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-49257

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges...

CVE-2023-49260

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminaltool.cgi" path. It can be used together with the vulnerability CVE-2023-49255...

Design/Logic Flaw

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges...

CVE-2023-49257

CVE-2023-49257: An authenticated user can upload an arbitrary CGI-compatible file via the certificate upload utility and execute it with root privileges. This is confirmed in RH CVE-2023-49257 entries; the impact is high (root compromise). The available documents do not specify vendor/product nam...