Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2022-29646
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.
0
Attacker Value
Unknown
CVE-2022-29645
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
0
Attacker Value
Unknown
CVE-2022-29644
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
0
Attacker Value
Unknown
CVE-2022-29643
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
Attacker Value
Unknown
CVE-2022-29642
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
Attacker Value
Unknown
CVE-2022-29641
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
Attacker Value
Unknown
CVE-2022-29640
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
Attacker Value
Unknown
CVE-2022-29639
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.
0
Attacker Value
Unknown
CVE-2022-29638
Disclosure Date: May 18, 2022 (last updated February 23, 2025)
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
