Show filters
610 Total Results
Displaying 361-370 of 610
Sort by:
Attacker Value
Unknown

CVE-2022-48067

Disclosure Date: January 27, 2023 (last updated February 24, 2025)
An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack.
Attacker Value
Unknown

CVE-2022-48066

Disclosure Date: January 27, 2023 (last updated February 24, 2025)
An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.
Attacker Value
Unknown

CVE-2022-48126

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.
Attacker Value
Unknown

CVE-2022-48125

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.
Attacker Value
Unknown

CVE-2022-48124

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.
Attacker Value
Unknown

CVE-2022-48123

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.
Attacker Value
Unknown

CVE-2022-48122

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.
Attacker Value
Unknown

CVE-2022-48121

Disclosure Date: January 20, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.
Attacker Value
Unknown

CVE-2022-47853

Disclosure Date: January 17, 2023 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.
Attacker Value
Unknown

CVE-2022-46634

Disclosure Date: December 15, 2022 (last updated February 24, 2025)
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function.