PT-2024-38173 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R version 9.1.0u.6268 B20220504 Description: A critical issue was found in the setWizardCfg function of the /cgi-bin/cstecgi.cgi file. The manipulation of the ssid argument leads to buffer overflow. It is possible to launch the...

CVE-2024-34786

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone not using UniFi Network Application that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app...

PT-2024-28381 · Shenzhen Libituo Technology Co. · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 contains a buffer overflow via the ApCliSsid parameter in the generate conf router function. This issue...

Ubiquiti UniFi Security Breach

Ubiquiti UniFi is a wireless networking system from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi iOS version 10.15.0, which stems from a misconfiguration introduced on a second-generation UniFi access point configured as a standalone, which could result in an SSID name change o...

CVE-2023-45215

A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...

The vulnerability of the setWiFiEasyCfg() function in the microprogramming software for TOTOLINK A3700R allows a hacker to execute arbitrary code.

The vulnerability of the setWiFiEasyCfg function in the microprogrammed wireless router software of TOTOLINK A3700R lies in the fact that the operation’s output escapes outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through the ss...

(Pwn2Own) Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSIDs embedded in scanned QR codes. The issue results...

CVE-2024-37640

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg...

CVE-2024-37635

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg...

CVE-2024-37634

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg...

CVE-2024-37633

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg...

CVE-2024-37635

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg...

CVE-2024-37635

CVE-2024-37635 affects TOTOLINK A3700R; multiple connected sources confirm a buffer/stack overflow in setWiFiBasicCfg via the ssid parameter. CNVD/CNNVD describe the impact as potential arbitrary code execution or denial of service; NVD/CVE notes a stack overflow vulnerability. Exploitation detai...

CVE-2024-37634

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg...

CVE-2024-37634

CVE-2024-37634 affects TOTOLINK A3700R. The A3700R (firmware V9.1.2u.6165_20211012) has a stack overflow vulnerability in the setWiFiEasyCfg function triggered via the ssid field. The issue enables an attacker to cause a crash or execute arbitrary code on the device (buffer/stack overflow). CVSSv...

CVE-2024-37633

TOTOLINK A3700R is affected by a stack overflow in the setWiFiGuestCfg function triggered via the ssid parameter. The issue, observed in version 9.1.2u.6165_20211012, is described as a stack buffer overflow in the input handling, with potential to execute arbitrary code or cause a denial of servi...

CVE-2024-37633

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg...

PT-2024-27689 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6165 20211012 Description: A stack overflow issue was discovered in the setWiFiBasicCfg function via the ssid parameter. This issue can potentially be exploited. Recommendations: For TOTOLINK A3700R version...

CVE-2024-37635

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the ssid in the function setWiFiBasicCfg failing to properly validate the length and size of the input data, which can be exploite...