Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkEx1800t Firmware

28 matches found

CVE
CVE•added 2024/05/08 5:15 p.m.•81 views

CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges.

9.8CVSS6.9AI score0.87328EPSS
CVE
CVE•added 2025/03/07 11:15 p.m.•65 views

CVE-2025-2097

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiate...

9.8CVSS7.3AI score0.00371EPSS
CVE
CVE•added 2025/03/07 10:15 p.m.•58 views

CVE-2025-2094

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launched...

9.8CVSS7.7AI score0.01975EPSS
CVE
CVE•added 2025/03/03 6:15 a.m.•56 views

CVE-2025-1852

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exp...

9.8CVSS7.3AI score0.00215EPSS
CVE
CVE•added 2025/03/07 10:15 p.m.•52 views

CVE-2025-2096

A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiate...

9.8CVSS7.8AI score0.01447EPSS
CVE
CVE•added 2024/12/09 2:15 a.m.•49 views

CVE-2024-12352

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The ...

9.8CVSS4.9AI score0.00174EPSS
CVE
CVE•added 2025/03/17 9:15 a.m.•49 views

CVE-2025-2369

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attac...

9.8CVSS7.2AI score0.00305EPSS
CVE
CVE•added 2025/03/07 10:15 p.m.•46 views

CVE-2025-2095

A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has ...

9.8CVSS7.8AI score0.01447EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•41 views

CVE-2023-51021

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2024/01/12 1:15 p.m.•40 views

CVE-2023-52026

TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface

9.8CVSS9.6AI score0.03086EPSS
CVE
CVE•added 2025/03/17 9:15 a.m.•37 views

CVE-2025-2370

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The a...

9.8CVSS7.2AI score0.00305EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•36 views

CVE-2023-51019

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•35 views

CVE-2023-51025

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•34 views

CVE-2023-51016

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•34 views

CVE-2023-51027

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•31 views

CVE-2023-51024

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•30 views

CVE-2023-51028

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•29 views

CVE-2023-51022

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•28 views

CVE-2023-51012

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•27 views

CVE-2023-51011

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•27 views

CVE-2023-51013

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•27 views

CVE-2023-51018

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•26 views

CVE-2023-51026

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•25 views

CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•24 views

CVE-2023-51020

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

9.8CVSS9.4AI score0.00294EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•22 views

CVE-2023-51014

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi

9.8CVSS9.4AI score0.0031EPSS
CVE
CVE•added 2023/12/22 7:15 p.m.•22 views

CVE-2023-51015

TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi

9.8CVSS9.5AI score0.0031EPSS
CVE
CVE•added 2023/12/22 6:15 p.m.•22 views

CVE-2023-51023

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.

9.8CVSS9.5AI score0.00294EPSS