CVE-2022-36484

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...

CVE-2022-36483

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the pppoeUser parameter...

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

CVE-2022-36486

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

Stack overflow

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the pppoeUser parameter...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg...

CVE-2022-36488

CVE-2022-36488 affects TOTOLINK N350RT firmware version V9.3.5u.6139_B20201216. A stack overflow is triggered in the setIpPortFilterRules function via the sPort parameter. According to the NVD entry, the CVSS v3.1 base score is 7.8 (High), with Local attack vector, Low attack complexity, Privileg...

CVE-2022-36488

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules...

CVE-2022-36487

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36485

CVE-2022-36485 affects TOTOLINK N350RT, specifically version 9.3.5u.6139_B20201216. A command-injection vulnerability exists in the hostName parameter of the setOpModeCfg function. The NVD metrics indicate a high-severity impact (CVSS 3.1: AV LOCAL, AC LOW, PR LOW, UI NONE, S U, C/H/I/A = HIGH). ...

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

CVE-2022-36484

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg...

CVE-2022-36483

Totolink N350RT running version 9.3.5u.6139_B20201216 contains a stack overflow vulnerability in the pppoeUser parameter. The issue is described across multiple sources (PT-2022-23405, CNNVD, Red Hat/NVD entries) as a stack overflow affecting this device, with CVSS metrics indicating high impact ...