CVE-2025-4496

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buff...

CVE-2024-34210

The TOTOLINK outdoor CPE CP450 (version 4.1.0cu.747_B20191224 ) contains a command injection vulnerability within the CloudACMunualUpdate function. The root cause is the lack of proper input validation for the FileName parameter, which fails to filter special characters and commands. A remote att...