Show filters
612 Total Results
Displaying 481-490 of 612
Sort by:
Attacker Value
Unknown

CVE-2021-42875

Disclosure Date: June 02, 2022 (last updated February 23, 2025)
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
Attacker Value
Unknown

CVE-2021-42872

Disclosure Date: June 02, 2022 (last updated February 23, 2025)
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
Attacker Value
Unknown

CVE-2022-29377

Disclosure Date: May 24, 2022 (last updated February 23, 2025)
Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH.
Attacker Value
Unknown

CVE-2022-29646

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.
Attacker Value
Unknown

CVE-2022-29645

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
Attacker Value
Unknown

CVE-2022-29644

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
Attacker Value
Unknown

CVE-2022-29643

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Attacker Value
Unknown

CVE-2022-29642

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Attacker Value
Unknown

CVE-2022-29641

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Attacker Value
Unknown

CVE-2022-29640

Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.