13091 matches found
Command injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function...
PT-2024-20365 · Totolink · Totolink A3300R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the url parameter in the setUrlFilterRules function. This allows for potential exploitation. No information is provided about the estimat...
CVE-2024-24325
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function...
PT-2024-1498 · Totolink · Totolink A3300R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was found in the setMacFilterRules function due to inadequate neutralization of special elements. This allows a remote attacker to execute arbitrary command...
CVE-2024-24327
TOTOLINK A3300R (firmware version V17.0.0cu.557_B20221024) contains a command-injection flaw in the setIpv6Cfg function via the pppoePass parameter. This is rated high impact (CVSS v3.1: CRITICAL, 9.8) with network attack vector and no user interaction. Public details consistently name the vulner...
CVE-2024-24328
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function...
CVE-2024-24324
TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...
TOTOLINK N200RE command parameter buffer overflow vulnerability
The TOTOLINK N200RE is a wireless router for the SOHO market. The TOTOLINK N200RE suffers from a buffer overflow vulnerability that originates from a stack-based buffer overflow in the command parameter of the setDiagnosisCfg function of /cgi-bin/cstecgi.cgi. No detailed vulnerability details are...
CVE-2024-24326
TOTOLINK A3300R firmware V17.0.0cu.557_B20221024 is affected by a command-injection vulnerability in the setStaticDhcpRules function via the arpEnable parameter. The root cause is insufficient input filtering for constructed command characters, enabling remote command execution with network acces...
CVE-2024-24331
CVE-2024-24331 affects TOTOLINK A3300R, specifically version 17.0.0cu.557_B20221024, where a command-injection flaw exists in the setWiFiScheduleCfg function via the enable parameter. The issue is rated with high impact (CVSS v3.1: CRITICAL, 9.8) across confidentiality, integrity, and availabilit...
TOTOLINK N350RT Session Hijacking Vulnerability
The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. The TOTOLINK N350RT suffers from a session hijacking vulnerability, which is caused by insufficient session expiration in the /cgi-bin/cstecgi.cgi script. An attacker could use this vulnerability to access other...
CVE-2024-24326
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...
TOTOLINK A3300R Security Breach
The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which originates from a command injection vulnerability in the pppoePass parameter of the setIpv6Cfg method...
CVE-2024-24328
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function...
TOTOLINK A3300R 安全漏洞
TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the desc parameter of the setWiFiAclRules method failing to correctly filter the construct command special...
CVE-2024-24329
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function...
CVE-2024-24329
The CVE-2024-24329 entry concerns TOTOLINK A3300R, affected firmware V17.0.0cu.557_B20221024. The vulnerability is a command injection in the setPortForwardRules function, exploitable via the enable parameter which is insufficiently filtered, allowing an attacker to execute arbitrary OS commands....
CVE-2024-24332
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...
PT-2024-20359 · Totolink · Totolink A8000Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A8000RU version 7.1cu.643 B20200521 Description: The issue is related to a hardcoded password for the root user stored in the /etc/shadow file. This could potentially allow unauthorized access to the system. Recommendations: For...