158 matches found
CVE-2024-31811
TOTOLINK EX200 vulnerable via langType parameter in setLanguageCfg, affecting version 4.0.3c.7646_B20201211. Root cause: langType fails to filter special elements in the constructed snippet, enabling remote code execution. Impact per metrics: high: CVSS 3.1 base score 8.0 (AV Adjacent, AC Low, PR...
PT-2024-24220 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A remote code execution issue was discovered, allowing attackers to execute code remotely via the langType parameter in the setLanguageCfg function. Recommendations: For TOTOLINK EX200...
CVE-2024-1003 Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow
A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched...
TOTOLINK N200RE 安全漏洞
The TOTOLINK N200RE is a wireless broadband router for small office or home SOHO environments. The TOTOLINK N200RE suffers from a stack buffer overflow vulnerability that originates from a stack-based buffer overflow in the lang parameter of the setLanguageCfg function of /cgi-bin/cstecgi.cgi. No...
PT-2024-1317 · Totolink · Totolink N200Re
Name of the Vulnerable Software and Affected Versions: Totolink N200RE version 9.3.5u.6139 B20201216 Description: A critical issue has been found in the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi, where the manipulation of the argument lang leads to a stack-based buffer overflow. Th...
TOTOLINK A3700R setLanguageCfg Method Buffer Overflow Vulnerability
The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that stems from the setLanguageCfg method failing to properly validate the length and size of the input data, which can be exploited by an attacker to...
CVE-2024-22660
TOTOLINKA3700RV9.1.2u.616520211012has a stack overflow vulnerability via setLanguageCfg...
Stack overflow
TOTOLINKA3700RV9.1.2u.616520211012has a stack overflow vulnerability via setLanguageCfg...
PT-2024-19524 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6165 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be triggered via the setLanguageCfg function. Recommendations: For TOTOLINK A3700R version 9.1.2u.6165, as a...
CVE-2024-22660
TOTOLINKA3700RV9.1.2u.616520211012has a stack overflow vulnerability via setLanguageCfg...
CVE-2024-22660
The CVE-2024-22660 entry concerns the TOTOLINK A3700R family. A stack overflow vulnerability exists in the setLanguageCfg function, triggered by improper input validation, and affects TOTOLINK A3700R devices (notably version 9.1.2u.6165, build 20211012). The root cause is a buffer/stack overflow ...
CVE-2024-22660
TOTOLINKA3700RV9.1.2u.616520211012has a stack overflow vulnerability via setLanguageCfg...
CVE-2024-0577 Totolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be initiated remotely. Th...
CVE-2024-0577 Totolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be initiated remotely. Th...
TOTOLINK LR1200GB 安全漏洞
The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's TOTOLINK Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the lang parameter of the setLanguageCfg function of the...
PT-2024-1172 · Totolink · Totolink Lr1200Gb
Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: A critical issue affects the setLanguageCfg function of the /cgi-bin/cstecgi.cgi file, where the manipulation of the lang argument leads to a stack-based buffer overflow. This can b...
CVE-2023-51020
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi...
CVE-2023-51020
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi...