VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

SUSE-SU-2022:2880-1 Security update for dpdk

This update of dpdk fixes the following issue: - Fix to read PCI device name as UTF strings bsc1198873 - Allow configuring thread granularity of Kernel NIC Interface bsc1195172 - Rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37519

Name of the Vulnerable Software and Affected Versions dpdk affected versions not specified Description The issue concerns a fix to read PCI device name as UTF strings, allowing the configuration of thread granularity of Kernel NIC Interface, and a rebuild with a new secure boot key due to grub2...

libinput security update

1.16.3-3 - Fix a format string vulnerability in the device name logging 2076815 CVE-2022-1215...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T, which stems from a remote command injection issue in the setDeviceName function of the global.so file, which could be exploited to control the device nam...

CVE-2021-42884

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T, which stems from a remote command injection issue in the setDeviceName function of the global.so file, which could be exploited to control the device nam...

SUSE-SU-2022:1892-1 Security update for dpdk

This update for dpdk fixes the following issues: Security: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication bsc1198963. - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master bsc1198964. Bugfixes: - kni: allow configuring thread...

The vulnerability of D-Link DIR-820L router’s microprogramming software, related to code errors, allows a hacker to execute arbitrary commands.

The vulnerability of D-Link DIR-820L router microprogramming software is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the device name parameter in /lan.asp...

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the devicemac parameter in /setting/setDeviceName...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the devicename parameter in /etting/setDeviceName...

D-Link DAP-1330 缓冲区错误漏洞

The D-Link DAP-1330 is a networking device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330OSS-firmware1.00b21 version, which originates from a heap-based buffer overflow in the devicename parameter of /goform/setDeviceSettings in the device...

PT-2022-2561

Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.05B03 Description The issue is related to a remote command execution vulnerability. It can be exploited via HTTP POST to get set ccp, allowing a remote attacker to execute arbitrary commands through the Device Name...

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

PT-2022-17726 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

多款TotoLink产品 操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R and other products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the deviceName parameter and deviceMac parameter in the...

CVE-2022-25550

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceName parameter...