Totolink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-39617 1Totolink 1X5000r Firmware Nov 21, 2024 Aug 21, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
CVE-2023-4412 1Totolink 1Ex1200l Firmware Nov 21, 2024 Aug 18, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated r...Show more A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-4411 1Totolink 1Ex1200l Firmware Nov 21, 2024 Aug 18, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attac...Show more A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-4410 1Totolink 1Ex1200l Firmware Nov 21, 2024 Aug 18, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to ini...Show more A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-40042 1Totolink 1T10 V2 Firmware Nov 21, 2024 Aug 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the retur...Show more TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code.Show less
CVE-2023-40041 1Totolink 1T10 V2 Firmware Nov 21, 2024 Aug 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return addre...Show more TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code.Show less
CVE-2023-34669 1Totolink 1Cp300+ Firmware Nov 21, 2024 Jul 17, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVE-2023-37173 1Totolink 1A3300r Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.
CVE-2023-37172 1Totolink 1A3300r Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.
CVE-2023-37171 1Totolink 1A3300r Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
CVE-2023-37170 1Totolink 1A3300r Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
CVE-2023-37149 1Totolink 1Lr350 Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.
CVE-2023-37148 1Totolink 1Lr350 Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.
CVE-2023-37146 1Totolink 1Lr350 Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
CVE-2023-37145 1Totolink 1Lr350 Firmware Nov 21, 2024 Jul 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
CVE-2023-33556 1Totolink 1A7100ru Firmware Jan 7, 2025 Jun 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
CVE-2023-31569 1Totolink 1X5000r Firmware Jan 8, 2025 Jun 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.
CVE-2023-33487 1Totolink 1X5000r Firmware Jan 9, 2025 May 31, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" paramet...Show more TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.Show less
CVE-2023-33486 1Totolink 1X5000r Firmware Jan 9, 2025 May 31, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" para...Show more TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.Show less
CVE-2023-33485 1Totolink 1X5000r Firmware Jan 10, 2025 May 31, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.

Previous 1...394041...56 Next