CVE-2022-40475

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

CVE-2022-37842

The CVE-2022-37842 issue affects TOTOLINK A860R, specifically version 4.1.2cu.5182_B20201027, where unfiltered parameters in infostat.cgi lead to a buffer overflow. Multiple sources (NVD, Red Hat, CVE list, CNNVD, PT Security) confirm the vulnerability, with CVSS 3.1 base score 9.8 (CRITICAL) and...

CVE-2022-37840

CVE-2022-37840 affects TOTOLINK A860R (4.1.2cu.5182_B20201027). The vulnerability is in the main function of downloadfile.cgi, described as a buffer overflow. Coordinated disclosures across multiple sources (NVD/NVD-derived entries, Red Hat advisory, CNVD, PRION, PT Security) consistently identif...

CVE-2022-37841

CVE-2022-37841 affects TOTOLINK A860R (v4.1.2cu.5182_B20201027). The issue is a hard-coded root password stored in /etc/shadow.sample, enabling potential unauthorized root access. Connected sources confirm the model and file, with Red Hat and other feeds reiterating the same root password disclos...

CVE-2022-37839

TOTOLINK A860R V4.1.2cu.5182B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi...

CVE-2022-36614

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

Command injection

TOTOLink A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...