Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA3300r Firmware

27 matches found

CVE
CVE•added 2024/01/30 3:15 p.m.•167 views

CVE-2024-24329

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function.

9.8CVSS9.7AI score0.83293EPSS
In wild
CVE
CVE•added 2024/01/30 3:15 p.m.•152 views

CVE-2024-24325

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function.

9.8CVSS9.7AI score0.02742EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•148 views

CVE-2024-24328

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function.

9.8CVSS9.7AI score0.84416EPSS
In wild
CVE
CVE•added 2024/01/30 3:15 p.m.•147 views

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function.

9.8CVSS9.7AI score0.01454EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•147 views

CVE-2024-24332

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function.

9.8CVSS9.7AI score0.02742EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•144 views

CVE-2024-24331

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function.

9.8CVSS9.7AI score0.01579EPSS
CVE
CVE•added 2023/07/07 8:15 p.m.•130 views

CVE-2023-37172

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

9.8CVSS9.7AI score0.01454EPSS
CVE
CVE•added 2023/07/07 8:15 p.m.•128 views

CVE-2023-37170

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.

9.8CVSS9.9AI score0.03254EPSS
CVE
CVE•added 2023/05/18 2:15 a.m.•74 views

CVE-2023-31729

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.

9.8CVSS9.6AI score0.00761EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•51 views

CVE-2024-23058

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function.

9.8CVSS9.8AI score0.0313EPSS
CVE
CVE•added 2024/03/26 9:15 p.m.•49 views

CVE-2024-27521

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows una...

8CVSS8.9AI score0.0244EPSS
CVE
CVE•added 2024/08/01 12:15 a.m.•48 views

CVE-2024-7331

A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack may be launched remotely. The exploi...

9CVSS8.8AI score0.01334EPSS
CVE
CVE•added 2023/10/31 3:15 p.m.•45 views

CVE-2023-46993

In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.

9.8CVSS9.6AI score0.02985EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•44 views

CVE-2024-24333

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function.

9.8CVSS9.7AI score0.02742EPSS
CVE
CVE•added 2023/10/31 2:15 p.m.•42 views

CVE-2023-46976

TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.

9.8CVSS9.6AI score0.02985EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•42 views

CVE-2024-24327

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function.

9.8CVSS9.7AI score0.01454EPSS
CVE
CVE•added 2024/01/30 3:15 p.m.•42 views

CVE-2024-24330

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function.

9.8CVSS9.7AI score0.01579EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•40 views

CVE-2024-22942

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function.

9.8CVSS9.7AI score0.0313EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•40 views

CVE-2024-23059

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function.

9.8CVSS9.7AI score0.02304EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•40 views

CVE-2024-23060

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function.

9.8CVSS9.7AI score0.02304EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•39 views

CVE-2024-23057

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function.

9.8CVSS9.7AI score0.0313EPSS
CVE
CVE•added 2024/07/28 10:15 a.m.•39 views

CVE-2024-7155

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local h...

4.7CVSS3.6AI score0.00065EPSS
CVE
CVE•added 2023/07/07 8:15 p.m.•37 views

CVE-2023-37171

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.

9.8CVSS9.7AI score0.01454EPSS
CVE
CVE•added 2024/01/11 4:15 p.m.•37 views

CVE-2024-23061

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function.

9.8CVSS9.7AI score0.02304EPSS
CVE
CVE•added 2023/10/31 3:15 p.m.•33 views

CVE-2023-46992

TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.

7.5CVSS7.7AI score0.00144EPSS
CVE
CVE•added 2023/07/07 8:15 p.m.•32 views

CVE-2023-37173

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.

9.8CVSS9.7AI score0.01579EPSS
CVE
CVE•added 2025/07/17 4:15 p.m.•9 views

CVE-2025-52046

Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

9.8CVSS8.6AI score0.31369EPSS