TOTOLINK LR1200GB 安全漏洞

TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. A security vulnerability exists in ToToLink LR1200GB version V9.1.0u.6619B20230130 and NR1800X version V9.1.0u.6681B20230703, which stems from improper handling of the lang parameter in the cstecgi.cgi...

TOTOLink A7000R 安全漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the ssid parameter of the urldecode function failing...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-28639

Summary: CVE-2024-28639 affects TOTOLink X5000R (9.1.0u.6118-B20201102) and A7000R (9.1.0u.6115-B20201022). A buffer overflow in the IP field arises from copying the IP field contents in the /www/cgi bin/cstegi.cgi function without length checking, enabling remote code execution and denial of ser...

CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

CVE-2023-49418

TOTOLink A7000R V9.1.0u.6115B20201022has a stack overflow vulnerability via setIpPortFilterRules...

CVE-2023-49418

TOTOLink A7000R, version 9.1.0u.6115_B20201022, contains a stack overflow in setIpPortFilterRules. Root cause: improper input handling in setIpPortFilterRules leading to stack overflow. Impact: as described across sources, could allow arbitrary code execution or cause denial of service; exploitat...

CVE-2023-49417

TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...

CVE-2023-49417

The CVE-2023-49417 entry concerns TOTOLink A7000R, version 9.1.0u.6115_B20201022, with a stack/stack buffer overflow in the setOpModeCfg function. Multiple connected sources describe a vulnerability where input length is not properly validated, enabling an attacker to potentially execute arbitrar...

Stack overflow

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2023-46977

The CVE-2023-46977 entry affects TOTOLINK LR1200GB version 9.1.0u.6619_B20230130, where a stack overflow is triggered by the password parameter in the loginAuth function. Multiple sources corroborate a boundary/stack overflow that could allow remote execution of code or cause a denial of service....

CVE-2023-36340

TOTOLINK NR1800X firmware version V9.1.0u.6279_B20210910 (and prior) contains a stack overflow in the loginAuth function triggered via the http_host parameter. CVSS 3.1: 9.8 (CRITICAL) with network exploitation, no user interaction; impacts confidentiality, integrity, and availability. No patch/r...

CVE-2023-36340

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a stack overflow via the httphost parameter in the function loginAuth...

CVE-2023-33487

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter...

CVE-2023-30013

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter...

CVE-2023-30013

The connected sources confirm a command-injection vulnerability in TOTOLINK X5000R firmware versions 9.1.0u.6118_B20201102 and 9.1.0u.6369_B20230113, specifically in the setting/setTracerouteCfg endpoint, allowing unauthenticated remote execution of arbitrary OS commands via the command parameter...

CVE-2022-44251

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the ussd parameter in the setUssd function...

Command injection

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the ussd parameter in the setUssd function...

CVE-2022-44251

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the ussd parameter in the setUssd function...