Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA7000r Firmware

12 matches found

CVE
CVE•added 2022/08/25 3:15 p.m.•52 views

CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.

7.8CVSS7.9AI score0.00097EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•50 views

CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2023/10/16 6:15 p.m.•50 views

CVE-2023-45985

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.5CVSS7.5AI score0.00348EPSS
CVE
CVE•added 2024/03/16 6:15 a.m.•48 views

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field.

7.5CVSS7AI score0.00496EPSS
CVE
CVE•added 2022/08/25 2:15 p.m.•43 views

CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•43 views

CVE-2022-37083

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.

7.8CVSS7.9AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•42 views

CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.

7.8CVSS7.9AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•40 views

CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•39 views

CVE-2022-37077

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter.

7.8CVSS7.8AI score0.00066EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•38 views

CVE-2022-37080

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.

7.8CVSS7.9AI score0.00073EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•38 views

CVE-2022-37084

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.

7.8CVSS7.8AI score0.00073EPSS
CVE
CVE•added 2022/08/25 2:15 p.m.•34 views

CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.

7.8CVSS7.8AI score0.00066EPSS