369 matches found
CVE-2022-44256
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function...
TOTOLINK LR350 缓冲区错误漏洞
TOTOLINK LR350 is a 4G LTE router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. A buffer overflow vulnerability exists in the TOTOLINK LR350. The vulnerability stems from a buffer overflow after authentication via the...
CVE-2022-44257
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function...
CVE-2022-44257
TOTOLINK LR350 9.3.5u.6369_B20220309 is affected by a post-authentication buffer overflow in the setOpModeCfg function via the pppoeUser parameter. Multiple connected sources describe this as a post-auth vulnerability with potential remote code execution, affecting after-auth access to the device...
PT-2022-27157
Name of the Vulnerable Software and Affected Versions TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description The issue is a post-authentication buffer overflow that occurs via the command parameter in the setTracerouteCfg function. This allows for potential exploitation after authentication has...
PT-2022-27158 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...
CVE-2022-44253
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...
PT-2022-27156 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the pppoeUser parameter in the setOpModeCfg function. This allows for potential exploitation after authentication has...