Lucene search
+L

59 matches found

CNNVD
CNNVD
added 2025/04/22 12:0 a.m.6 views

TOTOLINK EX1200T 安全漏洞

The TOTOLINK EX1200T is a wireless router from TOTOLINK that offers convenient network connectivity and management features. The TOTOLINK EX1200T suffers from a command execution vulnerability that originates from the presence of a pre-authenticated remote command execution of the webWlanIdx...

9.8CVSS7.7AI score0.01094EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/22 12:0 a.m.38 views

CVE-2025-28038

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter...

0.01094EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/22 12:0 a.m.10 views

CVE-2025-28038

TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter...

7.3AI score0.01094EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/02/25 12:0 a.m.11 views

The vulnerability of the setWebWlanIdx() function in TOTOLINK CP900 router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setWebWlanIdx function in TOTOLINK CP900 router microprogramming software lies in the lack of measures taken to neutralize special elements during the processing of the webWlanIdx parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

10CVSS8.2AI score0.02441EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/14 7:48 a.m.16 views

CVE-2024-34206

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter...

6.5CVSS7.8AI score0.01336EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.10 views

PT-2024-38147 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3600R version 4.1.2cu.5182 B20201102 Description: A critical issue was found in the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi, where the manipulation of the argument webWlanIdx leads to buffer overflow. This issue can ...

9CVSS8.8AI score0.01091EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2024/05/09 4:29 p.m.31 views

CVE-2024-34206

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter...

7.8AI score0.01336EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/04/10 12:0 a.m.5 views

TOTOLINK EX200 setWebWlanIdx Method Code Execution Vulnerability

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A code execution vulnerability exists in the TOTOLINK EX200, which stems from the webWlanIdx...

8.8CVSS8.2AI score0.00926EPSS
SaveExploits1References1
OSV
OSV
added 2024/04/08 1:15 p.m.7 views

CVE-2024-31808

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

8.8CVSS6.3AI score0.00926EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/08 1:15 p.m.15 views

CVE-2024-31808

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

8.8CVSS7.9AI score0.00926EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/08 12:0 a.m.6 views

TOTOLINK EX200 安全漏洞

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A code execution vulnerability exists in the TOTOLINK EX200, which stems from the webWlanIdx...

8.8CVSS8.1AI score0.00926EPSS
SaveExploits1References2
CVE
CVE
added 2024/04/08 12:0 a.m.65 views

CVE-2024-31808

TOTOLINK EX200 v4.0.3c.7646_B20201211 is affected by CVE-2024-31808, a remote code execution (RCE) via the webWlanIdx parameter in the setWebWlanIdx function. Multiple connected sources confirm an RCE vulnerability in this specific version, enabling arbitrary code execution. The public discussion...

8.8CVSS8.3AI score0.00926EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/08 12:0 a.m.12 views

CVE-2024-31808

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

8.5AI score0.00926EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/04/03 12:0 a.m.4 views

PT-2024-24216 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A remote code execution RCE issue was discovered, which can be exploited via the webWlanIdx parameter in the setWebWlanIdx function. Recommendations: For TOTOLINK EX200 version...

8.8CVSS7.9AI score0.00926EPSS
SaveExploits1References6
NVD
NVD
added 2023/03/24 2:15 p.m.25 views

CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS9.9AI score0.02441EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/24 2:15 p.m.3 views

CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS6AI score0.02441EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.32 views

CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10AI score0.02441EPSS
SaveExploits1References2
NVD
NVD
added 2023/02/14 3:15 p.m.30 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8CVSS9.8AI score0.0192EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/14 3:15 p.m.9 views

CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

9.8CVSS7.3AI score0.0192EPSS
SaveExploits1References1
Prion
Prion
added 2023/02/14 3:15 p.m.22 views

Command injection

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function...

7.5CVSS9.8AI score0.0192EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder