190 matches found
CVE-2024-31811
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the langType parameter in the setLanguageCfg function...
CVE-2024-31816
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg...
CVE-2024-31814
TOTOLINK EX200 V4.0.3c.7646B20201211 allows attackers to bypass login through the FormLogin function...
CVE-2024-31811
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the langType parameter in the setLanguageCfg function...
CVE-2024-31809
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the FileName parameter in the setUpgradeFW function...
CVE-2024-31812
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...
CVE-2024-31806
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a Denial-of-Service DoS vulnerability in the RebootSystem function which can reboot the system without authorization...
CVE-2024-31806
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a Denial-of-Service DoS vulnerability in the RebootSystem function which can reboot the system without authorization...
CVE-2024-31805
TOTOLINK EX200 V4.0.3c.7646B20201211 allows attackers to start the Telnet service without authorization via the telnetenabled parameter in the setTelnetCfg function...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A security vulnerability exists in TOTOLINK EX200, which stems from the ability to bypass log...
PT-2024-24224 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: An attacker can obtain sensitive information without authorization through the function getEasyWizardCfg. This issue allows unauthorized access to sensitive data. Recommendations: For...
CVE-2024-31811
TOTOLINK EX200 vulnerable via langType parameter in setLanguageCfg, affecting version 4.0.3c.7646_B20201211. Root cause: langType fails to filter special elements in the constructed snippet, enabling remote code execution. Impact per metrics: high: CVSS 3.1 base score 8.0 (AV Adjacent, AC Low, PR...
CVE-2024-31817
TOTOLINK EX200 V4.0.3c.7646_B20201211 is affected by CVE-2024-31817: an attacker can obtain sensitive information without authorization via the getSysStatusCfg function. Root cause described as information disclosure due to improper access to getSysStatusCfg. Impact is confidentiality (HIGH) with...
CVE-2024-31816
CVE-2024-31816 affects TOTOLINK EX200 (V4.0.3c.7646_B20201211). The flaw exists in the getEasyWizardCfg function, where an attacker can obtain sensitive information without authorization. Multiple sources (including Red Hat, CNVD, CVE records, and PT Security) corroborate an authorization issue l...
PT-2024-24223 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7314 B20191204 Description: An attacker can obtain the configuration file without authorization through the "/cgi-bin/ExportSettings.sh" API endpoint. Recommendations: For TOTOLINK EX200 version 4.0.3c.7314...
CVE-2024-31812
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...
CVE-2024-31808
TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A security vulnerability exists in TOTOLINK EX200, which stems from the fact that the...