Totolink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27135 1Totolink 1A7100ru Firmware Feb 25, 2025 Mar 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.
CVE-2022-28493 1Totolink 1Cp900 Firmware Nov 21, 2024 Mar 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,
CVE-2022-28491 1Totolink 1Cp900 Firmware Nov 21, 2024 Mar 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via...Show more TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2022-28492 1Totolink 1Cp900 Firmware Nov 21, 2024 Mar 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
CVE-2022-28494 1Totolink 1Cp900 Firmware Nov 21, 2024 Mar 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary...Show more TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2023-25395 1Totolink 1A7100ru Firmware Nov 21, 2024 Mar 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules.
CVE-2023-24184 1Totolink 1A7100ru Firmware Mar 14, 2025 Feb 21, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.
CVE-2023-23064 1Totolink 1A720r Firmware Mar 18, 2025 Feb 17, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.
CVE-2023-24238 1Totolink 1A7100ru Firmware Mar 18, 2025 Feb 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules.
CVE-2023-24236 1Totolink 1A7100ru Firmware Mar 18, 2025 Feb 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.
CVE-2023-24161 1Totolink 1Ca300 Poe Firmware Mar 20, 2025 Feb 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
CVE-2023-24160 1Totolink 1Ca300 Poe Firmware Mar 20, 2025 Feb 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
CVE-2023-24159 1Totolink 1Ca300 Poe Firmware Mar 20, 2025 Feb 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function.
CVE-2023-24276 1Totolink 1A7100ru Firmware Mar 25, 2025 Feb 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
CVE-2023-24157 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2023-24156 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2023-24155 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini.
CVE-2023-24154 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.
CVE-2023-24153 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2023-24152 1Totolink 1T8 Firmware Mar 26, 2025 Feb 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

Previous 1...414243...56 Next