Lucene search
K

17 matches found

NVD
NVD
added 2026/04/27 1:16 p.m.0 views

CVE-2026-7123

A vulnerability was found in Totolink A8000RU 7.1cu.643b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The...

10CVSS0.01221EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 12:15 p.m.2 views

CVE-2026-7123 Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection

A vulnerability was found in Totolink A8000RU 7.1cu.643b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The...

10CVSS8.2AI score0.01221EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.2 views

PT-2026-35417

A vulnerability was found in Totolink A8000RU 7.1cu.643 b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The...

10CVSS8.2AI score0.01221EPSS
Exploits0References6
NVD
NVD
added 2026/04/09 7:16 a.m.0 views

CVE-2026-5852

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument igmpVer causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS0.01235EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/09 6:15 a.m.1 views

CVE-2026-5852 Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument igmpVer causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS6.9AI score0.01235EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 6:15 a.m.2 views

CVE-2026-5852

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument igmpVer causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS6.9AI score0.01235EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.3 views

PT-2026-31591

Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A weakness exists in the Totolink A7100RU router. The setIptvCfg function within the /cgi-bin/cstecgi.cgi file, part of the CGI Handler component, is susceptible to OS command injection...

10CVSS7.4AI score0.01235EPSS
Exploits0References12
ATTACKERKB
ATTACKERKB
added 2026/03/31 3:0 a.m.0 views

CVE-2026-5178

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote exploitation of the attack is possible. The...

6.5CVSS5.6AI score0.00687EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/31 12:0 a.m.3 views

PT-2026-29188

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557 b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote exploitation of the attack is possible. The...

6.5CVSS5.6AI score0.00687EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 12:6 a.m.3 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS7.7AI score0.12707EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:6 a.m.4 views

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

10CVSS7.7AI score0.12707EPSS
Exploits1References1
NVD
NVD
added 2022/03/18 9:15 p.m.12 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS0.12707EPSS
Exploits1References1
NVD
NVD
added 2022/03/18 9:15 p.m.12 views

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

10CVSS0.12707EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/18 9:15 p.m.1 views

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS7.5AI score0.12707EPSS
Exploits1References2
Prion
Prion
added 2022/03/18 9:15 p.m.15 views

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

10CVSS9.6AI score0.12707EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/03/18 9:15 p.m.14 views

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

10CVSS9.7AI score0.12707EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/18 12:0 a.m.2 views

PT-2022-17296 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A remote command execution issue was discovered, allowing for potential exploitation via the vlanid parameter in the SetIPTVCfg function. This could lead to unauthorized access and control...

10CVSS9.3AI score0.12707EPSS
Exploits1References3
Rows per page
Query Builder