Lucene search
+L

42 matches found

Cvelist
Cvelist
added 2024/05/09 4:29 p.m.31 views

CVE-2024-34206

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter...

7.8AI score0.01336EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/04/10 12:0 a.m.4 views

TOTOLINK EX200 setWebWlanIdx Method Code Execution Vulnerability

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A code execution vulnerability exists in the TOTOLINK EX200, which stems from the webWlanIdx...

8.8CVSS8.2AI score0.00926EPSS
SaveExploits1References1
OSV
OSV
added 2024/04/08 1:15 p.m.6 views

CVE-2024-31808

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

8.8CVSS6.3AI score0.00926EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/04/08 12:0 a.m.12 views

CVE-2024-31808

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

8.5AI score0.00926EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/08 12:0 a.m.6 views

TOTOLINK EX200 安全漏洞

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A code execution vulnerability exists in the TOTOLINK EX200, which stems from the webWlanIdx...

8.8CVSS8.1AI score0.00926EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/03 12:0 a.m.4 views

PT-2024-24216 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A remote code execution RCE issue was discovered, which can be exploited via the webWlanIdx parameter in the setWebWlanIdx function. Recommendations: For TOTOLINK EX200 version...

8.8CVSS7.9AI score0.00926EPSS
SaveExploits1References6
OSV
OSV
added 2023/03/24 2:15 p.m.2 views

CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS6AI score0.02441EPSS
SaveExploits1References2
OSV
OSV
added 2023/02/14 3:15 p.m.9 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8CVSS7.3AI score0.0192EPSS
SaveExploits1References1
CVE
CVE
added 2023/02/14 12:0 a.m.56 views

CVE-2023-24161

Totolink CA300-PoE V6.2c.884 is affected by a command-injection vulnerability in the webWlanIdx parameter of the setWebWlanIdx function. The CVE-2023-24161 entry reports a high-severity (CRITICAL) issue with network-based access and no user interaction required; root cause is command injection vi...

9.8CVSS9.7AI score0.0192EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/14 12:0 a.m.6 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8AI score0.0192EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.8 views

PT-2023-19449 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A command injection issue was discovered via the webWlanIdx parameter in the setWebWlanIdx function. This allows for potential command injection attacks. Recommendations: For TOTOLINK CA300-PoE...

9.8CVSS9.7AI score0.0192EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.6 views

TOTOLINK CA300-PoE 命令注入漏洞

The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which originates from the discovery of a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8CVSS8.5AI score0.0192EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/10 2:15 p.m.5 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

9.8CVSS7.3AI score0.02565EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/10 2:15 p.m.2 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS7.2AI score0.02565EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/10 2:15 p.m.26 views

CVE-2022-28909

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS0.02565EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/10 2:15 p.m.20 views

Command injection

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS9.7AI score0.02565EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.6 views

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

10CVSS8.5AI score0.02565EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/05/10 12:0 a.m.10 views

PT-2022-19304 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was found via the webwlanidx parameter in the "/setting/setWebWlanIdx" API endpoint. This allows for potential exploitation. Recommendations: For TOTOLink N600R...

10CVSS9.5AI score0.02565EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.7 views

CVE-2022-26208

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

9.8CVSS6.1AI score0.02806EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/15 10:15 p.m.10 views

CVE-2022-26208

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the...

9.8CVSS7.5AI score0.02806EPSS
SaveExploits1References1
Rows per page
Query Builder