Cp300+ Firmware

cp300+_firmware

Vendor: Totolink • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-36782 1Totolink 1Cp300+ Firmware Jun 17, 2026 Jun 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
CVE-2023-36955 1Totolink 1Cp300+ Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
CVE-2023-36954 1Totolink 1Cp300+ Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36953 1Totolink 1Cp300+ Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36952 1Totolink 1Cp300+ Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
CVE-2023-34669 1Totolink 1Cp300+ Firmware Jun 17, 2026 Jul 17, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVE-2023-31856 1Totolink 1Cp300+ Firmware Jun 17, 2026 May 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.