28 matches found
CVE-2022-44254
TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function...
CVE-2022-44254
CVE-2022-44254 affects TOTOLINK LR350, specifically firmware version 9.3.5u.6369_B20220309. The vulnerability is a post-authentication buffer overflow in the setSmsCfg function, triggered via the text parameter, which can lead to remote code execution as described in multiple sources. Some docume...
PT-2022-27153 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the text parameter in the setSmsCfg function. This allows for potential exploitation after authentication has been...
TOTOLINK NR1800X setSmsCfg method text parameter buffer overflow vulnerability
TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. The TOTOLINK NR1800X suffers from a buffer overflow...
CVE-2022-41528
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...
CVE-2022-41528
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...
