Show filters
20 Total Results
Displaying 1-10 of 20
Sort by:
Attacker Value
Unknown

CVE-2024-28639

Disclosure Date: March 16, 2024 (last updated December 18, 2024)
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.
Attacker Value
Unknown

CVE-2023-49418

Disclosure Date: December 11, 2023 (last updated December 14, 2023)
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
Attacker Value
Unknown

CVE-2023-49417

Disclosure Date: December 11, 2023 (last updated December 14, 2023)
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.
Attacker Value
Unknown

CVE-2023-45985

Disclosure Date: October 16, 2023 (last updated October 20, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Attacker Value
Unknown

CVE-2023-45984

Disclosure Date: October 16, 2023 (last updated October 20, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
Attacker Value
Unknown

CVE-2023-36950

Disclosure Date: October 16, 2023 (last updated October 19, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
Attacker Value
Unknown

CVE-2023-36947

Disclosure Date: October 16, 2023 (last updated October 19, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
Attacker Value
Unknown

CVE-2022-37084

Disclosure Date: August 25, 2022 (last updated February 24, 2025)
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.
Attacker Value
Unknown

CVE-2022-37083

Disclosure Date: August 25, 2022 (last updated February 24, 2025)
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.
Attacker Value
Unknown

CVE-2022-37082

Disclosure Date: August 25, 2022 (last updated February 24, 2025)
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.