CVE-2023-43455: Improper Neutralization of Special Elements used in a Command

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...

CVE-2023-30013

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter...

PT-2022-23795

Name of the Vulnerable Software and Affected Versions TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description A stack overflow issue was discovered, which can be triggered via the command parameter at the "setting/setTracerouteCfg" endpoint. Recommendations For TOTOLINK A7000R version 9.1.0u.61...

CVE-2022-37081: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...

CVE-2022-37080: Out-of-bounds Write

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg...