195 matches found
Stack overflow
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...
Stack overflow
TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...
Stack overflow
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...
Command injection
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...
CVE-2022-37083
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...
CVE-2022-37075
TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...
CVE-2022-37075
TOTOLink A7000R (version 9.1.0u.6115_B20201022) contains a stack overflow in setDiagnosisCfg() triggered via the ip parameter. Exploitation would be local, with low privileges and no user interaction; impact is high on confidentiality, integrity, and availability per CVSS. No official patch detai...
CVE-2022-36484
TOTOLINK N350RT with firmware 9.3.5u.6139_B20201216 has a stack overflow in setDiagnosisCfg. CVSS v3.1 vector shows Local access, Low attack complexity, Low privileges, No user interaction, with High impact on confidentiality, integrity, and availability. The issue’s root cause is a stack overflo...
CVE-2022-36484
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...
CVE-2022-36481
TOTOLINK N350RT version 9.3.5u.6139_B20201216 contains a command-injection vulnerability in setDiagnosisCfg reachable via the ip parameter. Root cause: input in the ip parameter is unsafely processed, enabling arbitrary commands with local access (attack vector: LOCAL; impact: CONFIDENTIALITY, IN...
CVE-2022-36466
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg...
TOTOLINK A7000R 缓冲区错误漏洞
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a stack overflow in the ip parameter of the setDiagnosisCfg method...
TOTOLINK A7000R 操作系统命令注入漏洞
The TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a command injection issue in the ip parameter of the setDiagnosisCfg method...
PT-2022-23406 · Totolink · Totolink N350Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered in the setDiagnosisCfg function, which can be exploited. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary...
TOTOLINK A3700R 缓冲区错误漏洞
TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3700R version V9.1.2u.6134B20201202, which stems from a stack overflow in the ip parameter of the setDiagnosisCfg method...
TOTOLINK N350RT 操作系统命令注入漏洞
The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from an ip parameter command injection issue in the setDiagnosisCfg method...
PT-2022-23389 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...
PT-2022-23798 · Totolink · Totolink A7000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A command injection issue was found via the ip parameter at the setDiagnosisCfg function. Recommendations: For version 9.1.0u.6115 B20201022, consider restricting access to the...
TOTOLINK EX1200T Remote Command Injection Vulnerability
TOTOLINK EX1200T is a wireless signal booster. a remote command injection vulnerability exists in the setDiagnosisCfg function in the lib/cstemodules/system.so file in TOTOLINK EX1200T V4.1.2cu.5215. An attacker can exploit this vulnerability to take control of ipDoamin...
