13089 matches found
The vulnerability of the `setUpgradeFW` function in TOTOLINK CP450 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the setUpgradeFW function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...
The vulnerability of the formMapDelDevice function in the microprogramming software for TOTOLINK A3002R allows a intruder to execute arbitrary commands.
The vulnerability of the formMapDelDevice function in the microprogrammed software of TOTOLINK A3002R routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the apcli Cancel_wps() function (/usr/lib/lua/luci/controller/mtkwifi.lua) in the TOTOLINK A6000R router software allows a attacker to execute arbitrary commands or cause service interruptions.
The vulnerability of the apcliCancelwps function /usr/lib/lua/luci/controller/mtkwifi.lua of the TOTOLINK A6000R router’s software is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the setWebWlanIdx function in the /lib/cste_modules/wireless.so file of the TOTOLINK A3100R router’s microprogramming system, which allows a attacker to execute arbitrary commands.
The vulnerability of the setWebWlanIdx function in the /lib/cstemodules/wireless.so module of the TOTOLINK A3100R router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a...
PT-2025-20391 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid5g parameter in the setWiFiEasyCfg function. This allows for potential exploitation. Recommendations: For TOTOLIN...
PT-2025-20394 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid5g parameter in the setWiFiEasyGuestCfg function. This allows for potential exploitation. Recommendations: For...
PT-2025-20419 · Totolink · Totolink A3100R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the priority parameter in the setMacQos interface of /lib/cste modules/firewall.so. This can be accessed through the API endpoi...
PT-2025-20417 · Totolink · Totolink A3100R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the comment parameter in the setMacFilterRules function. This allows for potential exploitation. Recommendations: For TOTOLINK...
CVE-2025-3249
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apclicancelwps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The explo...
PT-2025-18029 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT, affecting the file /boafrm/formWlwds. The manipulation of the submit-url argument leads to a buffer overflow. This issue can ...
PT-2025-18024 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue was found in the file /boafrm/formWdsEncrypt, where the manipulation of the submit-url argument leads to a buffer overflow. This can be initiated remotely. Recommendations:...
PT-2025-18031 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A problematic issue has been found, affecting an unknown function of the file /home.htm of the IP Port Filtering component. The manipulation of the Comment argument leads to cross-site...
PT-2025-18022 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability was found in the TOTOLINK N150RT, affecting an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the Hostname argument leads to a buffer...
PT-2025-18033 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A vulnerability was found in the MAC Filtering Page component of the TOTOLINK N150RT router, affecting some unknown functionality of the file /home.htm. The manipulation of the Comment...
PT-2025-18023 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT, affecting some unknown functionality of the file /boafrm/formVlan. The manipulation of the submit-url argument leads to buffe...
PT-2025-18018 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue affects the processing of the file /boafrm/formWsc. The manipulation of the localPin argument leads to command injection. The attack may be initiated remotely...
PT-2025-18021 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT router. The issue affects an unknown function of the file /boafrm/formPortFw. The manipulation of the service type argument...
PT-2025-18032 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A vulnerability was found in the LAN Settings Page component, specifically in the /boafrm/fromStaticDHCP file. The manipulation of the Hostname argument leads to cross-site scripting. The...
PT-2025-18030 · Totolink · Totolink N150Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue affects the processing of the file /boafrm/formWsc. The manipulation of the submit-url argument leads to a buffer overflow. This issue can be exploited remotely...