195 matches found
CVE-2023-50147
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822B20200513...
Command injection
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822B20200513...
PT-2023-31483 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOlink A3700R router device version V9.1.2u.5822 B20200513 Description: The issue is related to an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi. This vulnerability affects the TOTOlink A3700R...
CVE-2023-50147
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822B20200513...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
Code injection
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-43453
CVE-2023-43453 affects TOTOLINK X6000R (V9.4.0cu.652_B20230116 to V9.4.0cu.852_B20230719). The vulnerability arises in the setDiagnosisCfg component where the IP parameter is not properly filtered, allowing a remote attacker to execute arbitrary code. Exploitation details are consistently describ...
CVE-2023-36952
TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...
CVE-2023-36952
TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...
Stack overflow
TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...
CVE-2023-36952
TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...
TOTOLINK CP300+ Buffer Error Vulnerability
The TOTOLINK CP300+ is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CP300+ version V5.2cu.7594B20200910 and prior versions, which originates from the pingIp parameter in the function setDiagnosisCfg containing a stack overflow...
CVE-2023-36952
TOTOLINK CP300+ (firmware version 5.2cu.7594_B20200910) contains a stack overflow in the setDiagnosisCfg() function, exploitable via the pingIp parameter over the network. The CVE-2023-36952 entry rates this as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high impact on co...
PT-2023-25752 · Totolink · Totolink Cp300+
Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ version 5.2cu.7594 B20200910 Description: A stack overflow issue was discovered via the pingIp parameter in the setDiagnosisCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK CP300+ version...
CVE-2023-4410
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L ENV9.3.5u.6146B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...
TOTOLINK EX1200L 操作系统命令注入漏洞
The TOTOLINK EX1200L is a wireless repeater from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK EX1200L ENV9.3.5u.6146B20201023 version, which stems from the setDiagnosisCfg function that could lead to a system command injection...
PT-2023-29100 · Totolink · Totolink Ex1200T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version EN V9.3.5u.6146 B20201023 Description: A critical issue was found, affecting the setDiagnosisCfg function, which leads to os command injection. This can be initiated remotely. Recommendations: For TOTOLINK EX1200L...