100 matches found
PT-2023-12948 · Totolink · Totolink Outdoor Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue concerns a command injection vulnerability in the setPasswordCfg function, which can be exploited via the adminuser and adminpass parameters. This allows attackers t...
TOTOLINK CP900 安全漏洞
TOTOLINK CP900 is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK CP900. An attacker can exploit the vulnerability to initiate a Telnet service...
CVE-2022-28494
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2022-28491
The CVE-2022-28491 issue affects TOTOLink outdoor CPE CP900 (V6.3c.566_B20171026). It is a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter, allowing an attacker to execute arbitrary commands through a crafted request. CVSS 3.1 base score is 9.8 (CRITICA...
CVE-2022-28497
CVE-2022-28497 affects TOTOLink outdoor CPE CP900 (v6.3c.566_B20171026). The vulnerability is a command injection in the mtd_write_bootloader function exploitable via the filename parameter in crafted requests. The NVD entry indicates a high-severity impact (C/H/I/A all high) with network access,...
PT-2023-12943 · Totolink · Totolink Outdoor Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue concerns a command injection vulnerability in the NTPSyncWithHost function via the host name parameter. This allows attackers to execute arbitrary commands via a...
CVE-2022-28496
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
TOTOLINK CP900 命令注入漏洞
The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. A security vulnerability exists in the TOTOLINK CP900 due to a command injection issue in the filename parameter of the mtdwritebootloader function...
CVE-2022-28493
CVE-2022-28493 affects TOTOLINK CP900 V6.3c.566. The Telnet service can be started due to a design/logic flaw, with CVSS v3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation status is not provided in the sources. PT-Security notes disable Telnet as a mitigation until a patch is...
CVE-2022-28491
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
TOTOLINK CP900 操作系统命令注入漏洞
The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. The TOTOLINK CP900 suffers from an operating system command injection vulnerability that stems from a command injection issue in the filename parameter of the setUpgradeFW function...
PT-2023-12949 · Totolink · Totolink Outdoor Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue is related to a command injection vulnerability in the mtd write bootloader function via the filename parameter. This allows attackers to execute arbitrary commands...
TOTOLINK CP900 操作系统命令注入漏洞
The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. The TOTOLINK CP900 suffers from an operating system command injection vulnerability that stems from a command injection issue in the hostname parameter of the NTPSyncWithHost function...
TOTOLINK CP900 命令注入漏洞
The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. A security vulnerability exists in the TOTOLINK CP900 due to a command injection issue in the adminuser and adminpassparameter parameters of the setPasswordCfg function...
CVE-2022-28493
A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,...
CVE-2022-28496
CVE-2022-28496 affects TOTOLink outdoor CPE CP900 (version 6.3c.566_B20171026). A command injection vulnerability exists in the setPasswordCfg function exposed via the adminuser and adminpass parameters, allowing an attacker to execute arbitrary commands through a crafted request. The CVE entry n...
CVE-2022-28494
The CVE-2022-28494 entry relates to TOTOLink outdoor CPE CP900 (version 6.3c.566_B20171026). A command injection flaw exists in the setUpgradeFW function reachable via the filename parameter, allowing an attacker to execute arbitrary commands through a crafted request. The NVD metrics indicate a ...
CVE-2022-28493
A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,...
PT-2023-12947 · Totolink · Totolink Outdoor Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue is related to a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This allows attackers to execute arbitrary commands via a...
