CVE-2026-31181

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi...

CVE-2024-27521

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote command execution RCE vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows...

CVE-2024-27521

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote command execution RCE vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows...

CVE-2024-24332

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...

CVE-2024-24328

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function...

CVE-2024-24327

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function...

CVE-2024-24330

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function...

CVE-2024-24333

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function...

Command injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

CVE-2024-24329

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function...

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

CVE-2024-24330

The CVE-2024-24330 entry describes a command injection in TOTOLINK A3300R, affecting version 17.0.0cu.557_B20221024, via the port or enable parameters in the setRemoteCfg function. The underlying issue is failure to properly filter construct command-related input, enabling arbitrary command execu...

CVE-2024-24328

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function...

CVE-2024-24330

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function...

CVE-2024-24329

The CVE-2024-24329 entry concerns TOTOLINK A3300R, affected firmware V17.0.0cu.557_B20221024. The vulnerability is a command injection in the setPortForwardRules function, exploitable via the enable parameter which is insufficiently filtered, allowing an attacker to execute arbitrary OS commands....

CVE-2024-24332

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...

CVE-2024-24333

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function...

CVE-2024-24325

The CVE-2024-24325 entry concerns TOTOLINK A3300R, version V17.0.0cu.557_B20221024, which has a command injection vulnerability in the setParentalRules function via the enable parameter. The root cause is insufficient filtering of special characters/commands in that parameter, enabling arbitrary ...

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

CVE-2024-24328

The CVE describes a command-injection vulnerability in TOTOLINK A3300R firmware V17.0.0cu.557_B20221024, exploitable via the enable parameter in setMacFilterRules. Unauthenticated attackers could execute arbitrary OS commands, potentially compromising the router (as per the NVD/Nuclei entries). R...