Show filters
610 Total Results
Displaying 221-230 of 610
Sort by:
Attacker Value
Unknown
CVE-2023-48805
Disclosure Date: November 30, 2023 (last updated February 25, 2025)
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
0
Attacker Value
Unknown
CVE-2023-48804
Disclosure Date: November 30, 2023 (last updated February 25, 2025)
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
0
Attacker Value
Unknown
CVE-2023-48803
Disclosure Date: November 30, 2023 (last updated February 25, 2025)
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
0
Attacker Value
Unknown
CVE-2023-48802
Disclosure Date: November 30, 2023 (last updated February 25, 2025)
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
0
Attacker Value
Unknown
CVE-2023-48192
Disclosure Date: November 20, 2023 (last updated February 25, 2025)
An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.
0
Attacker Value
Unknown
CVE-2023-46485
Disclosure Date: October 31, 2023 (last updated February 25, 2025)
An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component.
0
Attacker Value
Unknown
CVE-2023-46484
Disclosure Date: October 31, 2023 (last updated February 25, 2025)
An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.
0
Attacker Value
Unknown
CVE-2023-46993
Disclosure Date: October 31, 2023 (last updated February 25, 2025)
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.
0
Attacker Value
Unknown
CVE-2023-46992
Disclosure Date: October 31, 2023 (last updated February 25, 2025)
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.
0
Attacker Value
Unknown
CVE-2023-46979
Disclosure Date: October 31, 2023 (last updated February 25, 2025)
TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.
0
