CVE-2023-24144

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function...

CVE-2023-24141

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function...

CVE-2023-24148

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function...

CVE-2023-24141

CVE-2023-24141 affects TOTOLINK CA300-PoE (V6.2c.884). The vulnerability is a command injection via the NetDiagPingTimeOut parameter in the setNetworkDiag function. CVSS 3.1 scores indicate a network-accessible, high-severity issue with no user interaction and no privileges required, with impacts...

CVE-2023-24146

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function...

TOTOLINK CA300-PoE 信任管理问题漏洞

The TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK CA300-PoE version V6.2c.884, which originates from /etc/config/product.ini storing the password for the telnet service...

CVE-2023-24143

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function...

CVE-2023-24142

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function...

CVE-2023-24141

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function...

CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

PT-2023-19435 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A command injection issue was discovered via the minute parameter in the setRebootScheCfg function. This allows for potential command injection attacks. Recommendations: For TOTOLINK CA300-PoE...

CVE-2023-24140

CVE-2023-24140 affects TOTOLINK CA300-PoE hardware running V6.2c.884. The issue is a command injection via the NetDiagPingNum parameter in the setNetworkDiag function. Multiple sources corroborate this vulnerability, with a high-severity CVSS v3.1 score (9.8, Network, no authentication, user inte...

CVE-2023-24143

CVE-2023-24143 affects TOTOLINK CA300-PoE (V6.2c.884). A command injection vulnerability exists in the NetDiagTracertHop parameter of the setNetworkDiag function. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, no user interaction required, and impacts to confid...

CVE-2023-24147

CVE-2023-24147 affects TOTOLINK CA300-PoE router (Firmware v6.2c.884). The root cause is a hardcoded Telnet password stored in /etc/config/product.ini, enabling potential exposure of credentials. Documents describe a hardcoded credential issue and indicate an attacker could disclose sensitive inf...

PT-2023-1540 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: The issue is related to the use of hardcoded credentials in the /etc/config/product.ini component of the TOTOLINK CA300-PoE router's firmware. This could allow a remote attacker to disclose...

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

CVE-2022-27632

CVE-2022-27632 is a CSRF vulnerability in MEIKYO ELECTRIC Rebooters and related devices (e.g., WATCH BOOT nino RPC-M2C, WATCH BOOT light RPC-M5C, WATCH BOOT L-zero RPC-M4L, WATCH BOOT mini RPC-M4H, WATCH BOOT nino RPC-M2CS, Signage Rebooter RPC-M4HSi, PoE BOOT nino PoE8M2, TIME BOOT mini RSC-MT4H...