A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
9.8CVSS
9.7AI Score
0.05EPSS
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
7.5CVSS
7.5AI Score
0.001EPSS
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
9.8CVSS
9.6AI Score
0.001EPSS
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
9.8CVSS
9.6AI Score
0.777EPSS
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
9.8CVSS
9.6AI Score
0.777EPSS
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
9.8CVSS
9.6AI Score
0.001EPSS