Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA7000r Firmware

14 matches found

CVE
CVE•added 2022/03/15 10:15 p.m.•75 views

CVE-2022-27005

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.46705EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•69 views

CVE-2022-27003

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.31349EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•64 views

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.31349EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•52 views

CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.

7.8CVSS7.9AI score0.00097EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•50 views

CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2022/08/29 9:15 p.m.•45 views

CVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

9.8CVSS9.5AI score0.00113EPSS
CVE
CVE•added 2022/08/25 2:15 p.m.•43 views

CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•43 views

CVE-2022-37083

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.

7.8CVSS7.9AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•42 views

CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.

7.8CVSS7.9AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•40 views

CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

7.8CVSS7.8AI score0.00281EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•39 views

CVE-2022-37077

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter.

7.8CVSS7.8AI score0.00066EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•38 views

CVE-2022-37080

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.

7.8CVSS7.9AI score0.00073EPSS
CVE
CVE•added 2022/08/25 3:15 p.m.•38 views

CVE-2022-37084

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.

7.8CVSS7.8AI score0.00073EPSS
CVE
CVE•added 2022/08/25 2:15 p.m.•34 views

CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.

7.8CVSS7.8AI score0.00066EPSS