1724 matches found
CVE-2023-51028: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK EX1800T 9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi...
CVE-2023-51018
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi...
CVE-2023-51020
Summary (CVE-2023-51020) : Affects TOTOlink EX1800T, version 9.1.0cu.2112_B20220316. The flaw is in the setLanguageCfg interface’s cstecgi.cgi, exploitable via the langType parameter to perform unauthorized arbitrary command execution. The CVSS vector indicates Network access, no privileges requi...
TOTOLINK EX1200L 安全漏洞
TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the setOpModeCfg interface of...
CVE-2023-51034
CVE-2023-51034 affects TOTOLINK EX1200L (v9.3.5u.6146_B20201023). The vulnerability allows arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface. Root cause cited across sources includes improper filtering of command characters in the UploadFirmwareFile function exposed by ...
PT-2023-31726 · Totolink · Totolink Ex1800T
Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns unauthorized arbitrary command execution. It is related to the lanPriDns parameter of the "setLanConfig" interface in the "cstecgi.cgi". Recommendations: For...
CVE-2023-51015
TOTOLINX EX1800T (firmware v9.1.0cu.2112_B20220316) is affected by a command-injection vulnerability in the cstecgi.cgi setDmzCfg interface. The root cause is an arbitrary command execution path triggered by the enable parameter, enabling an attacker with network access to run arbitrary commands ...
TOTOLINK EX1200L 安全漏洞
TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the NTPSyncWithHost interface of...
CVE-2023-51011
CVE-2023-51011 affects TOTOLINK EX1800T, firmware version 9.1.0cu.2112_B20220316. The vulnerability is an unauthorized arbitrary command execution through the lanPriDns parameter of the setLanConfig interface in cstecgi.cgi. Multiple sources confirm the issue; exploitation details are not provide...
CVE-2023-6906: Buffer Copy without Checking Size of Input
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer...
The vulnerability of the cstecgi.cgi implementation in TOTOLINK X5000R router microprogramming software allows a perpetrator to execute arbitrary commands.
The vulnerability of the cstecgi.cgi microprogramming system implementation in TOTOLINK X5000R routers is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
CVE-2023-6612
A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...
EUVD-2023-58835
A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...
CVE-2023-6612 Totolink X5000R cstecgi.cgi setWizardCfg os command injection
A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...
CVE-2023-6612: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Totolink X5000R 9.1.0cu.2300B20230112. It has been rated as critical. This issue affects the function...
CVE-2023-46510: Improper Neutralization of Special Elements used in an OS Command
An issue in ZIONCOM Hong Kong Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.cgi to the settings/setPasswordCfg function...
CVE-2023-31729
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...
CVE-2023-31729
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...
