CVE-2022-41518

TOTOLINK NR1800X firmware 9.1.0u.6279_B20210910 is affected by CVE-2022-41518 due to a command injection in the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi. The issue originates from inadequate input filtering of the FileName parameter, enabling arbitrary command execution. CVSS 3.1 base ...

TOTOLINK T6 sub_421504 Function Command Injection Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421504 function in cstecgi.cgi failing to properly filter construct command...

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

Command injection

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

Buffer overflow

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

Command injection

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38826

The CVE-2022-38826 issue affects TOTOLINK T6, specifically version 4.1.5cu.709_B20210518, in the cstecgi.cgi endpoint. The root cause is inadequate filtering of constructed command characters in cstecgi.cgi (sub_421504), enabling arbitrary command execution. Impact is high: remote attacker could ...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 (v4.1.5cu.709_B20210518) is affected by a Buffer Overflow in the cstecgi.cgi endpoint. The issue is described across multiple sources as a vulnerability in TOTOLINK T6 that could enable a high-impact, network-based exploit (CVSS v3.1: CRITICAL, A:H; I:H; C:H). Root cause stated as a b...

CVE-2022-38828

CVE-2022-38828 affects TOTOLINK T6 (version 4.1.5cu.709_B20210518). The vulnerability is a command-injection in the cstecgi.cgi endpoint, enabling arbitrary command execution. CVSSv3.1 base score 9.8 (CRITICAL) with network exposure, no privileges, no user interaction required. Public sources in ...

TOTOLINK T6 操作系统命令注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421504 function in cstecgi.cgi failing to properly filter construct command...

PT-2022-24586 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to command injection via the cstecgi.cgi endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated number ...

PT-2022-24585 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to a Buffer Overflow via the cstecgi.cgi endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affect...

CVE-2022-37843

In TOTOLINK A860R V4.1.2cu.5182B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability...