Totolink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-44249 1Totolink 1Lr350 Firmware Apr 25, 2025 Nov 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.
CVE-2022-41528 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
CVE-2022-41527 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function.
CVE-2022-41526 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function.
CVE-2022-41525 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
CVE-2022-41524 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function.
CVE-2022-41523 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function.
CVE-2022-41522 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
CVE-2022-41521 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function.
CVE-2022-41520 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function.
CVE-2022-41518 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.
CVE-2022-41517 1Totolink 1Nr1800x Firmware Nov 21, 2024 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
CVE-2022-40475 1Totolink 1A860r Firmware May 21, 2025 Sep 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
CVE-2022-38828 1Totolink 1T6 Firmware Nov 21, 2024 Sep 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
CVE-2022-38827 1Totolink 1T6 Firmware Nov 21, 2024 Sep 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
CVE-2022-38826 1Totolink 1T6 Firmware Nov 21, 2024 Sep 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVE-2022-38823 1Totolink 1T6 Firmware Nov 21, 2024 Sep 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVE-2022-38535 1Totolink 1A720r Firmware Nov 21, 2024 Sep 15, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.
CVE-2022-38534 1Totolink 1A720r Firmware Nov 21, 2024 Sep 15, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.
CVE-2022-38308 1Totolink 1A7000ru Firmware Nov 21, 2024 Sep 14, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a...Show more TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.Show less

Previous 1...444546...56 Next