CVE-2022-36483

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the pppoeUser parameter...

CVE-2022-36482

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg...

CVE-2022-36482

CVE-2022-36482 applies to TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a command injection flaw exists in the function setLanguageCfg exposed through the lang parameter . The vulnerability could allow arbitrary command execution with local access and could impact confidentiality, integri...

CVE-2022-36481

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...

CVE-2022-36481

TOTOLINK N350RT version 9.3.5u.6139_B20201216 contains a command-injection vulnerability in setDiagnosisCfg reachable via the ip parameter. Root cause: input in the ip parameter is unsafely processed, enabling arbitrary commands with local access (attack vector: LOCAL; impact: CONFIDENTIALITY, IN...

CVE-2022-36480

CVE-2022-36480 affects TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a stack overflow is triggered by the command parameter in the function setTracerouteCfg. Exploitation details are not elaborated in the provided documents, but one source notes this as a potential exploitation path. A pr...

CVE-2022-36480

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

CVE-2022-36479

TOTOLINK N350RT v9.3.5u.6139_B20201216 is affected by a local command-injection in NTPSyncWithHost via the host_time parameter. Root cause: unvalidated host_time input enables arbitrary commands, impacting confidentiality, integrity, and availability (CVSS v3.1: 7.8). Exploitation could require l...

CVE-2022-36479

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

TOTOLINK N350RT 缓冲区错误漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command parameter stack overflow issue in the setTracerouteCfg method...

TOTOLINK N350RT 操作系统命令注入漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a hostName parameter command injection issue in the setOpModeCfg method...

TOTOLINK N350RT 操作系统命令注入漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command parameter command injection issue in the setTracerouteCfg method...

TOTOLINK N350RT 操作系统命令注入漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command injection issue in the hosttime parameter of the NTPSyncWithHost method...

PT-2022-23404 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the lang parameter in the setLanguageCfg function. Recommendations: For version 9.3.5u.6139 B20201216, avoid using the lang parameter in the...

PT-2022-23403 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the ip parameter in the setDiagnosisCfg function, allowing potential exploitation. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139...

PT-2022-23405 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered, which occurs via the pppoeUser parameter. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary workaround, conside...

PT-2022-23401 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the host time parameter in the NTPSyncWithHost function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

PT-2022-23402 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

PT-2022-23406 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered in the setDiagnosisCfg function, which can be exploited. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary...

PT-2022-23407 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was discovered via the hostName parameter in the setOpModeCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...