Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkX5000r Firmware9.1.0u.6118 b20201102

22 matches found

CVE
CVE•added 2023/05/05 2:15 p.m.•79 views

CVE-2023-30013

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

9.8CVSS9.7AI score0.91748EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•75 views

CVE-2022-27005

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.46705EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•71 views

CVE-2022-26213

Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.8AI score0.41394EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•69 views

CVE-2022-27003

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.31349EPSS
CVE
CVE•added 2021/04/14 6:15 p.m.•67 views

CVE-2021-27710

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system func...

10CVSS9.9AI score0.2015EPSS
CVE
CVE•added 2022/03/15 10:15 p.m.•64 views

CVE-2022-27004

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8CVSS9.9AI score0.31349EPSS
CVE
CVE•added 2023/10/16 6:15 p.m.•63 views

CVE-2023-45984

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

9.8CVSS9.7AI score0.0021EPSS
CVE
CVE•added 2023/05/31 1:15 p.m.•59 views

CVE-2023-33486

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.

9.8CVSS9.7AI score0.00752EPSS
CVE
CVE•added 2023/05/31 1:15 p.m.•55 views

CVE-2023-33487

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.

9.8CVSS9.7AI score0.00752EPSS
CVE
CVE•added 2023/05/31 1:15 p.m.•53 views

CVE-2023-33485

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.

8.8CVSS8.8AI score0.00342EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•51 views

CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the eip, sip, server parameters.

7.8CVSS7.6AI score0.00407EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•51 views

CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName.

10CVSS10AI score0.2581EPSS
CVE
CVE•added 2023/10/16 5:15 a.m.•51 views

CVE-2023-36947

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.

9.8CVSS9.7AI score0.00907EPSS
CVE
CVE•added 2023/10/16 6:15 p.m.•50 views

CVE-2023-45985

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.5CVSS7.5AI score0.00348EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•48 views

CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.

10CVSS10AI score0.2581EPSS
CVE
CVE•added 2024/03/16 6:15 a.m.•48 views

CVE-2024-28639

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.

9.8CVSS8.1AI score0.03453EPSS
CVE
CVE•added 2024/03/16 6:15 a.m.•48 views

CVE-2024-28640

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field.

7.5CVSS7AI score0.00496EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•47 views

CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via the url parameter.

7.8CVSS7.6AI score0.00433EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•47 views

CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.

7.5CVSS7.7AI score0.00248EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 parameters.

7.8CVSS7.6AI score0.00529EPSS
CVE
CVE•added 2021/04/14 4:15 p.m.•39 views

CVE-2021-27708

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system func...

10CVSS9.9AI score0.2015EPSS
CVE
CVE•added 2023/10/16 6:15 a.m.•37 views

CVE-2023-36950

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

9.8CVSS9.6AI score0.00907EPSS