Totolink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-35401 1Totolink 1Cp900l Firmware Apr 3, 2025 May 28, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
CVE-2024-35400 1Totolink 1Cp900l Firmware Apr 3, 2025 May 28, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules
CVE-2024-35399 1Totolink 1Cp900l Firmware Apr 3, 2025 May 28, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth
CVE-2024-35398 1Totolink 1Cp900l Firmware Apr 3, 2025 May 28, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.
CVE-2024-35397 1Totolink 1Cp900l Firmware Apr 3, 2025 May 28, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary com...Show more TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2024-35388 1Totolink 1Nr1800x Firmware May 30, 2025 May 24, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode
CVE-2024-35387 1Totolink 1Lr350 Firmware Apr 4, 2025 May 24, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
CVE-2024-35396 1Totolink 1Cp900l Firmware Apr 3, 2025 May 24, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.
CVE-2024-35395 1Totolink 1Cp900l Firmware Apr 3, 2025 May 24, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
CVE-2024-32355 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function.
CVE-2024-32354 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 6.0 MEDIUM· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi.
CVE-2024-32353 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi.
CVE-2024-32352 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary.
CVE-2024-32351 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mru" parameter in the "cstecgi.cgi" binary.
CVE-2024-32350 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary.
CVE-2024-32349 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 6.0 MEDIUM· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary.
CVE-2024-35099 1Totolink 1Lr350 Firmware May 5, 2025 May 14, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
CVE-2024-34921 1Totolink 1X5000r Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.
CVE-2024-34308 1Totolink 1Lr350 Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode.
CVE-2024-34219 1Totolink 1Cp450 Firmware Apr 4, 2025 May 14, 2024 N/A· v4 8.6 HIGH· v3 N/A· v2 TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.

Previous 1...262728...56 Next