31 matches found
CVE-2025-51390
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function...
CVE-2025-51390
The TOTOLINK N600R router (version 4.3.0cu.7647_B20210106 ) is vulnerable to a command injection vulnerability within the microprogramming software. The flaw exists in the setWiFiWpsConfig function because the pin parameter fails to properly neutralize or filter special characters and commands. A...
CVE-2025-51390
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function...
CVE-2025-51390
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function...
CVE-2025-51390: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function...
TOTOLINK N600R setWiFiWpsConfig function buffer overflow vulnerability
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...
CVE-2025-22903
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig...
CVE-2025-22903: Stack-based Buffer Overflow
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig...
PT-2025-16378 · Totolink · Totolink N600R
Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the pin parameter in the setWiFiWpsConfig function. Recommendations: For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider disabling th...
CVE-2023-40041: Out-of-bounds Write
TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cstemodules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code...
CVE-2023-40041
TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cstemodules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code...