Command injection

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setDiagnosisCfg function...

CVE-2023-52029

TOTOLINK A3700R (v9.1.2u.5822_B20200513) contains a remote command execution (RCE) in the setDiagnosisCfg function. The issue arises from improper handling/filtering of constructed command characters, enabling arbitrary command execution. Affected component: setDiagnosisCfg; impact: remote comman...

CVE-2023-52028

CVE-2023-52028 affects TOTOLINK A3700R devices (v9.1.2u.5822_B20200513). The vulnerability is a remote command execution via the setTracerouteCfg function, stemming from insufficient filtering of constructed command characters, allowing an attacker to execute arbitrary commands remotely. Public d...

PT-2024-14366 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1200T version 4.1.2cu.5232 B20210713 Description: The issue is related to a remote command execution RCE vulnerability. It is exploited via the main function. Recommendations: For TOTOlink EX1200T version 4.1.2cu.5232 B20210713,...

CVE-2023-52032

TOTOlink EX1200T V4.1.2cu.5232B20210713 was discovered to contain a remote command execution RCE vulnerability via the "main" function...

CVE-2023-52027

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

CVE-2023-52029

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setDiagnosisCfg function...

PT-2024-14364 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R version 9.1.2u.5822 B20200513 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the setOpModeCfg function. Recommendations: For TOTOlink A3700R version 9.1.2u.5822...

CVE-2023-52028

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setTracerouteCfg function...

CVE-2023-52027

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the NTPSyncWithHost function...

CVE-2023-52029

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setDiagnosisCfg function...

PT-2024-14362 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R version 9.1.2u.5822 B20200513 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the setTracerouteCfg function. Recommendations: For TOTOlink A3700R version 9.1.2u.5822...

CVE-2023-52028

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setTracerouteCfg function...

CVE-2023-52030

The CVE-2023-52030 issue affects TOTOLINK A3700R, specifically v9.1.2u.5822_B20200513, where the setOpModeCfg function permits remote command execution (RCE). Public sources describe a command-injection path through setOpModeCfg, enabling arbitrary command execution on the device. The vulnerabili...

CVE-2023-52027

CVE-2023-52027 affects TOTOLINK A3700R (v9.1.2u.5822_B20200513). The NTPSyncWithHost function allows remote command execution due to insufficient filtering of constructed commands, enabling arbitrary commands to be run by an attacker with network access. Public sources corroborate RCE via NTPSync...

CVE-2023-52030

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setOpModeCfg function...

CVE-2023-52032

TOTOlink EX1200T V4.1.2cu.5232B20210713 was discovered to contain a remote command execution RCE vulnerability via the "main" function...

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches, related to insecure privilege management, allows attackers to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level via SSH...

PT-2024-14365 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R version 9.1.2u.5822 B20200513 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the UploadFirmwareFile function. Recommendations: For TOTOlink A3700R version 9.1.2u.5822...

PT-2024-14361 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R version 9.1.2u.5822 B20200513 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the NTPSyncWithHost function. Recommendations: For version 9.1.2u.5822 B20200513, conside...