Lucene search
+L

555 matches found

Vulnrichment
Vulnrichment
added 2024/01/09 3:31 p.m.5 views

CVE-2023-7223 Totolink T6 cstecgi.cgi access control

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

5.3CVSS7AI score0.00644EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/09 2:15 p.m.9 views

CVE-2023-7221

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

9.8CVSS6.1AI score0.01518EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/09 2:15 p.m.35 views

CVE-2023-7221

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.7AI score0.01518EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/09 2:15 p.m.28 views

Buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS7.3AI score0.01518EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/01/09 2:00 p.m.79 views

CVE-2023-7221

Totolink T6 (version 4.1.9cu.5241_B20210923) is affected by CVE-2023-7221. A buffer overflow exists in the HTTP POST Request Handler at /cgi-bin/cstecgi.cgi?action=login, triggered by manipulating the v41 argument. The vulnerability can be exploited remotely and has been disclosed publicly. Sever...

10CVSS9.5AI score0.01518EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/09 2:00 p.m.12 views

CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.7AI score0.01518EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/01/09 2:00 p.m.50 views

CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.8AI score0.01518EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.9 views

TOTOLINK T6 访问控制错误漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

6.5CVSS6.6AI score0.00644EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/09 12:00 a.m.10 views

PT-2024-1582 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: Totolink T6 version 4.1.9cu.5241 B20210923 Description: A vulnerability has been found in the Totolink T6, affecting an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads t...

6.5CVSS5.6AI score0.00644EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.12 views

Totolink T6 安全漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in Totolink T6 version 4.1.9cu.5241B20210923, which originates from the component HTTP POST Request Handler in the file /cgi-bin/cstecgi.cgi that fails to correctly validate t...

10CVSS8.1AI score0.01518EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/12/31 12:00 a.m.28 views

PT-2023-8245 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: Totolink T6 version 4.1.9cu.5241 B20210923 Description: A critical issue has been found in the Totolink T6 mesh system, related to a buffer overflow when handling the v41 parameter in the /cgi-bin/cstecgi.cgi?action=login API endpoint. This c...

10CVSS9.8AI score0.01518EPSS
SaveExploits1References8
CNVD
CNVD
added 2022/09/20 12:00 a.m.11 views

TOTOLINK T6 sub_421504 Function Command Injection Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421504 function in cstecgi.cgi failing to properly filter construct command...

9.8CVSS8AI score0.01157EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/20 12:00 a.m.15 views

TOTOLINK T6 sub_421AA0 Function Command Injection Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421AA0 function in cstecgi.cgi failing to properly filter construct command...

9.8CVSS8AI score0.19301EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/16 3:15 p.m.30 views

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

9.8CVSS0.19301EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/16 3:15 p.m.6 views

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

9.8CVSS5.8AI score0.19301EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/16 3:15 p.m.5 views

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

9.8CVSS5.8AI score0.19301EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/16 3:15 p.m.12 views

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

9.8CVSS5.8AI score0.1199EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/16 3:15 p.m.8 views

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

9.8CVSS6AI score0.01157EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/16 3:15 p.m.4 views

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

9.8CVSS6AI score0.01157EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/16 3:15 p.m.9 views

CVE-2022-38823

In TOTOLINK T6 V4.1.5cu.709B20210518, there is a hard coded password for root in /etc/shadow.sample...

9.8CVSS5.8AI score0.0097EPSS
SaveExploits1References1
Rows per page
Query Builder