CVE-2022-36463

Summary: CVE-2022-36463 affects TOTOLINK A3700R, version V9.1.2u.6134_B20201202, where a stack overflow is triggered by a command parameter in the function setTracerouteCfg. The vulnerability arises from improper handling of input in that function, leading to potential stack overrun. Impact (per ...

CVE-2022-36463

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

CVE-2022-36458

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

TOTOLINK A3700R 操作系统命令注入漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A3700R version V9.1.2u.6134B20201202, which stems from a command injection issue in the command parameter of the setTracerouteCfg method...

PT-2022-23381 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A command injection issue was found via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK A3700R version...

TOTOLINK A3700R 缓冲区错误漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3700R version V9.1.2u.6134B20201202, which stems from a stack overflow in the command parameter of the setTracerouteCfg method...

PT-2022-23795

Name of the Vulnerable Software and Affected Versions TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description A stack overflow issue was discovered, which can be triggered via the command parameter at the "setting/setTracerouteCfg" endpoint. Recommendations For TOTOLINK A7000R version 9.1.0u.61...

PT-2022-23402 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

CVE-2022-36487: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-37080: Out-of-bounds Write

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg...

CVE-2022-37081: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...

CVE-2022-36480: Out-of-bounds Write

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

CVE-2022-36458: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36463: Out-of-bounds Write

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

PT-2022-23386

Name of the Vulnerable Software and Affected Versions TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This issue allows for potential exploitation. Recommendations For TOTOLINK A3700R versi...