CVE-2023-48804

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48805

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability that stems from the pass parameter of the sub4119A0 function failing to...

CVE-2023-48808

TOTOLINK X6000R (V9.4.0cu.852_B20230719) is affected by a command execution vulnerability in the shttpd front-end handling. The issue arises in the sub_4119A0 function, which obtains fields via Uci_Set_The_Str and passes them to CsteSystem, enabling arbitrary command execution. Affected component...

CVE-2023-48810

CVE-2023-48810 affects TOTOLINK X6000R (V9.4.0cu.852_B20230719). The shttpd service’s sub_4119A0 uses front-end fields via Uci_Set_The_Str passed to CsteSystem, creating a command execution vulnerability. Public details in connected sources describe a remote command-injection risk with high impac...

CVE-2023-48803

CVE-2023-48803 affects TOTOLINK X6000R V9.4.0cu.852_B20230719. The shttpd component’s sub_4119A0 routine obtains fields from the front-end via Uci_Set_The_Str and passes them to CsteSystem, enabling command execution on the device. CVSS v3.1 metrics indicate network access, no privileges, no user...

CVE-2023-48810

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

PT-2023-7584 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: Totolink X5000R version 9.1.0cu.2300 B20230112 Description: A critical issue affects the function...

TOTOLINK A3700R Code Execution Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A code execution vulnerability exists in the TOTOLINK A3700R v9.1.2u.6134B20201202 version, which can be exploited by an attacker to execute arbitrary code on the system...

CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

Code injection

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A code execution vulnerability exists in the TOTOLINK A3700R v9.1.2u.6134B20201202 version, which can be exploited by an attacker to execute arbitrary code on the system...

CVE-2023-48192

TOTOLINK A3700R v9.1.2u.6134_B20201202 has a local code execution vulnerability (CVE-2023-48192) via the setTracerouteCfg function. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD, CVE list) corroborate the affected product/version and impact. No exploit details or in‑the‑wild data are provide...

CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function...

VulnCheck KEV: CVE-2021-35327

A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...

TOTOLINK X6000R Access Control Error Vulnerability

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from improper access control of the device and can be exploited by an attacker to reset the login password and WI...

TOTOLINK A3300R file_name parameter command injection vulnerability

The TOTOLINK A3300R is a wireless router manufactured by China's Gion Electronics TOTOLINK for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the filename parameter of the UploadFirmwareFile function failing to properly filt...

TOTOLINK A3300R Access Control Error Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3300R version V17.0.0cu.557B20221024 suffers from an Access Control Error vulnerability that stems from incorrect access control. An attacker can exploit the vulnerability to reset multiple critical passwor...

TOTOLINK X6000R setLedCfg Function Code Execution Vulnerability

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. A code execution vulnerability exists in TOTOLINK X6000R. The vulnerability stems from the application failing to properly filter special...