Lucene search
+L

11491 matches found

CNVD
CNVD
•added 2024/07/29 12:00 a.m.•87 views

TOTOLINK A3000RU product.ini file hard-coded password vulnerability

The TOTOLINK A3000RU is a home wireless router. The TOTOLINK A3000RU suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /webcste/cgi-bin/product.ini file. An attacker can exploit the vulnerability by using a hard-coded password to access t...

8.8CVSS5.4AI score0.00747EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/07/29 12:00 a.m.•46 views

TOTOLINK A3600R Hardcoded Password Vulnerability

The TOTOLINK A3600R is a wireless router. The TOTOLINK A3600R suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the Telnet service, which can be exploited by an attacker to cause tampering of the device configuration, disclosure of sensitive...

8.8CVSS5.8AI score0.00559EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/07/28 10:15 p.m.•19 views

CVE-2024-7170

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The...

8.8CVSS4.8AI score0.00747EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/28 10:00 p.m.•26 views

CVE-2024-7170 TOTOLINK A3000RU product.ini hard-coded password

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The...

5.1CVSS4.8AI score0.00747EPSS
SaveExploits1References4
CVE
CVE
•added 2024/07/28 10:00 p.m.•81 views

CVE-2024-7170

The CVE-2024-7170 entry refers to TOTOLINK A3000RU (version 5.9c.5185) with a vulnerability in processing /web_cste/cgi-bin/product.ini that enables use of a hard-coded password. The issue has been disclosed publicly and the vendor did not respond to disclosure. Connected sources corroborate the ...

8.8CVSS4.8AI score0.00747EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/07/28 10:00 p.m.•57 views

CVE-2024-7170 TOTOLINK A3000RU product.ini hard-coded password

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The...

5.1CVSS0.00747EPSS
SaveExploits1References4
NVD
NVD
•added 2024/07/28 3:15 p.m.•38 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS0.00559EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/07/28 3:15 p.m.•23 views

CVE-2024-7159

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

8.8CVSS5.3AI score0.00559EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/28 2:31 p.m.•28 views

CVE-2024-7159 TOTOLINK A3600R Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

5.5CVSS5.3AI score0.00559EPSS
SaveExploits1References4
CVE
CVE
•added 2024/07/28 2:31 p.m.•81 views

CVE-2024-7159

The CVE-2024-7159 entry concerns TOTOLINK A3600R (firmware 4.1.2cu.5182_B20201102) where the Telnet Service processes the file /web_cste/cgi-bin/product.ini in a way that enables use of a hard-coded password. Public disclosures and multiple sources (Red Hat, CNVD, CVE records, PT Security) confir...

8.8CVSS5.3AI score0.00559EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/07/28 2:31 p.m.•52 views

CVE-2024-7159 TOTOLINK A3600R Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. It has been rated as critical. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. The exploit has been...

5.5CVSS0.00559EPSS
SaveExploits1References4
NVD
NVD
•added 2024/07/28 10:15 a.m.•39 views

CVE-2024-7155

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

4.7CVSS0.00251EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/07/28 10:15 a.m.•24 views

CVE-2024-7155

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

4.7CVSS4.3AI score0.00251EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/07/28 10:00 a.m.•47 views

CVE-2024-7155 TOTOLINK A3300R shadow.sample hard-coded password

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

2.5CVSS0.00251EPSS
SaveExploits1References4
CVE
CVE
•added 2024/07/28 10:00 a.m.•72 views

CVE-2024-7155

TOTOLINK A3300R, version 17.0.0cu.557_B20221024, has a vulnerability in the /etc/shadow.sample file where a hard-coded password is used via an unknown functionality. This enables a local attack with high attack complexity and public disclosure of the exploit. No fixed version is listed in the pro...

4.7CVSS4.3AI score0.00251EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/28 12:00 a.m.•8 views

CVE-2024-7155: Use of Hard-coded Password

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

4.7CVSS4.3AI score0.00251EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/28 12:00 a.m.•10 views

CVE-2024-7170: Use of Hard-coded Password

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /webcste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The...

8.8CVSS4.8AI score0.00747EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/28 12:00 a.m.•17 views

PT-2024-38121 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue affects the Telnet Service component, specifically the processing of the file /web cste/cgi-bin/product.ini. This manipulation leads to the use of a hard-coded...

8.8CVSS5.3AI score0.00559EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/07/28 12:00 a.m.•22 views

PT-2024-38117 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A vulnerability has been found in the affected software, classified as problematic. It affects an unknown functionality of the file /etc/shadow.sample, leading to the use of a...

4.7CVSS4.6AI score0.00251EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/07/28 12:00 a.m.•23 views

PT-2024-38132 · Totolink · Totolink A3000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3000RU version 5.9c.5185 Description: A problem was found in the processing of the file /web cste/cgi-bin/product.ini, which leads to the use of a hard-coded password. The issue has been disclosed to the public and may be used. The...

8.8CVSS5AI score0.00747EPSS
SaveExploits1References8
Rows per page
Query Builder