195 matches found
CVE-2022-38535
The CVE-2022-38535 entry concerns TOTOLINK-720R (v4.1.5cu.374) with a remote code execution (RCE) flaw exploitable via the setTracerouteCfg function. The vulnerability is described across multiple connected sources as affecting TOTOLINK-720R, enabling an attacker to execute arbitrary code remotel...
CVE-2022-38535: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg function...
PT-2022-24442 · Totolink · Totolink A720R
Name of the Vulnerable Software and Affected Versions: TOTOLINK-720R version 4.1.5cu.374 Description: A remote code execution issue was discovered, allowing for potential exploitation via the setTracerouteCfg function. Recommendations: For TOTOLINK-720R version 4.1.5cu.374, consider disabling the...
CVE-2022-37081
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...
Stack overflow
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg...
CVE-2022-36480
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...
CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36480
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...
CVE-2022-36458
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36458
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36463
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...
Stack overflow
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...
Command injection
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
Command injection
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
Stack overflow
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...
CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36480
CVE-2022-36480 affects TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a stack overflow is triggered by the command parameter in the function setTracerouteCfg. Exploitation details are not elaborated in the provided documents, but one source notes this as a potential exploitation path. A pr...