PT-2023-25817 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was found in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 17.0.0cu.557 B20221024, avoid using the ip parameter in the...

CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

Command injection

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2022-44253

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...

CVE-2022-44253

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function...

CVE-2022-41526

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function...

Stack overflow

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function...

CVE-2022-41526

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function...

CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...

PT-2022-23389 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a wireless signal booster. a remote command injection vulnerability exists in the setDiagnosisCfg function in the lib/cstemodules/system.so file in TOTOLINK EX1200T V4.1.2cu.5215. An attacker can exploit this vulnerability to take control of ipDoamin...

CVE-2022-26207

Totolink devices Totolink A830R, A3100R, A950RG, A800R, A3000RU and A810R are affected by a command-injection in the function setDiagnosisCfg via the ipDoamin parameter. Successful exploitation could allow arbitrary command execution. The Red Hat/PRION/CPAI coverage consistently references the sa...