92 matches found
CVE-2025-25609: Buffer Copy without Checking Size of Input
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticipv6 parameter in the formIpv6Setup interface of /bin/boa...
PT-2025-9131
Name of the Vulnerable Software and Affected Versions: TOTOlink A3002R version V1.1.1-B20200824.0128 Description: The issue arises from a buffer overflow due to improper input validation of the pppoe dns1 parameter in the formIpv6Setup interface of the /bin/boa endpoint. Recommendations: For...
PT-2025-9130
Name of the Vulnerable Software and Affected Versions TOTOlink A3002R version V1.1.1-B20200824.0128 Description The issue arises from a buffer overflow due to improper input validation of the static gw parameter in the formIpv6Setup interface of the /bin/boa endpoint. Recommendations For TOTOlink...
CVE-2024-50667: Buffer Copy without Checking Size of Input
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks...
TOTOLINK X2000R Gh formIpv6Setup Method Stack Buffer Overflow Vulnerability
TOTOLINK X2000R Gh is a Wi-Fi6 router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a stack buffer overflow vulnerability that stems from the formIpv6Setup method failing to properly validate the length size of the input data, which can be exploited by an attacker to...
CVE-2023-46541
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...
CVE-2023-46541
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...
Stack overflow
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...
CVE-2023-46541
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...
PT-2023-30071 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formIpv6Setup. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...
