13091 matches found
PT-2024-3096 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version V4.0.3c.7646 B20201211 Description: The issue exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function of the TOTOLINK EX200 router's firmware. This allows a remote attacker to...
CVE-2024-32334
Summary: CVE-2024-32334 affects TOTOLINK N300RT, specifically version V2.1.8-B20201030.1539, with a stored XSS vulnerability in the IP/Port Filtering feature of the Firewall page. What is affected: TOTOLINK N300RT vulnerable component is the IP/Port Filtering section under the Firewall configurat...
CVE-2024-32335
TOTOLINK N300RT V2.1.8-B20201030.1539 is affected by a Store XSS vulnerability in the Wireless Page’s Access Control. Root cause: lack of input filtering/escaping in Access Control. Impact per available data: potential execution of arbitrary script in the user’s browser (C/L/I/L), CVSSv3.1 base s...
PT-2024-24513 · Totolink · Totolink N300Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RT version V2.1.8-B20201030.1539 Description: The issue is related to a Store Cross-site scripting XSS vulnerability. This vulnerability is located in the IP/Port Filtering section under the Firewall Page. Cross-site scripting XS...
CVE-2024-32325
TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...
CVE-2024-32325
TOTOLINK EX200 with firmware v4.0.3c.7646_B20201211 exposes an XSS in the setWiFiExtenderConfig function via the ssid parameter. Root cause appears to be lack of proper input filtering/escaping in the web UI. Impact is Cross-site Scripting on the device management context; no exploitation details...
TOTOLINK N300RT 安全漏洞
The TOTOLINK N300RT is a wireless router designed for home and small business users. The TOTOLINK N300RT suffers from a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data by the IP/Port Filtering feature of the Firewall page, an...
The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2024-32335
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Access Control under the Wireless Page...
CVE-2024-32326
The CVE-2024-32326 entry concerns TOTOLINK EX200 firmware version V4.0.3c.7646_B20201211, which is reported to have a Cross-site Scripting (XSS) vulnerability via the key parameter in the setWiFiExtenderConfig function. The vulnerability is mapped in multiple sources (NVD/NIST CVE entry, Red Hat ...
PT-2024-3093 · Totolink · Totolink Ex200
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: The issue is related to a Cross-site scripting XSS vulnerability. This vulnerability exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...
CVE-2024-32334
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...
PT-2024-24512 · Totolink · Totolink N300Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RT version V2.1.8-B20201030.1539 Description: The issue is related to a Store Cross-site scripting XSS vulnerability. This vulnerability is located in the WDS Settings under the Wireless Page, allowing potential exploitation...
CVE-2024-32333
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in MAC Filtering under the Firewall Page...
CVE-2024-32335
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Access Control under the Wireless Page...
CVE-2024-32326
TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...
TOTOLINK N300RT 安全漏洞
The TOTOLINK N300RT is an 802.11n compliant wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK N300RT version V2.1.8-B20201030.1539, which originates from a stored cross-site scripting vulnerability in the WDS Settings function on the Wireless page...