PT-2024-1418 · Delta Electronics · Ispsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics ISPSoft affected versions not specified Description: A heap buffer-overflow exists in Delta Electronics ISPSoft, allowing an anonymous attacker to exploit this issue by enticing a user to open a specially crafted DVP file,...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a set of Human Machine Interface HMI software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft that originates from a buffer overflow vulnerability when parsing the wKPFStringLen field of a DPS file...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a Human Machine Interface HMI software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft that originates from a buffer overflow vulnerability when parsing the wMailContentLen field of a DPS file...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a Human Machine Interface HMI software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the wTitleTextLen field of a DPS file...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a set of human machine interface HMI software from Delta Electronics of Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the InitialMacroLen field of a DPS file...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a set of human machine interface HMI software from Delta Electronics of Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the wLogTitlesActionLen field of a DPS file...

TOTOLINK A3700R setDiagnosisCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R version v9.1.2u.5822B20200513, which stems from the setDiagnosisCfg method failing to correctly filter constructed command special characters, commands, and...

TOTOLINK A3700R setTracerouteCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the setTracerouteCfg method failing to correctly filter constructed command special characters, commands, and so on...

TOTOLINK A3700R setOpModeCfg Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A3700R v9.1.2u.5822B20200513, which stems from the setOpModeCfg method failing to correctly filter constructed command special characters, commands, and so on. An...

TOTOLINK A3300R setTr069Cfg Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the pass parameter of the setTr069Cfg method failing to correctly filter construct command special...

TOTOLINK A3700R UploadFirmwareFile Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3700R v9.1.2u.5822B20200513 version, which stems from the UploadFirmwareFile method failing to correctly filter constructed command special characters,...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK EX1200T version V4.1.2cu.5232B20210713, which stems from the main method failing to properly filter construct command special characters, commands, and so on. An...

electronicworldtv.co.uk Cross Site Scripting vulnerability OBB-3834022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TOTOLINK N350RT Buffer Overflow Vulnerability (CNVD-2024-04915)

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. The TOTOLINK N350RT version 9.3.5u.6139B202012 suffers from a buffer overflow vulnerability, which originates from the function loginAuth in the file /cgi-bin/cstecgi.cgi that fails to correctly validate the length...

TOTOLINK T6 Access Control Error Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

TOTOLINK X2000R Buffer Overflow Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The Totolink X2000R suffers from a buffer overflow vulnerability that originates from the function formTmultiAP in file /bin/boa failing to properly validate the length size of the input data, which can be exploited by a...

TOTOLINK X2000R Buffer Overflow Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK X2000R X2000RV2 version 2.0.0-B20230727.10434. The vulnerability stems from the formTmultiAP function in file /bin/boa failing to properly validate the length size of th...

TOTOLINK X6000R Command Execution Vulnerability (CNVD-2024-04922)

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in TOTOLINK X6000R version v9.4.0cu.852B20230719, which stems from the component /cgi-bin/cstecgi.cgi failing to correctly filter constructed command special characters, commands,...

voxxelectronics.com Cross Site Scripting vulnerability OBB-3828283

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TOTOLINK EX1800T setWiFiExtenderConfig Interface Command Execution Vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setWiFiExtenderConfig interface, which originates from the failure of the key5g parameter of the cstecgi .cgi's setWiFiExtenderConfig interface t...