Show filters
21 Total Results
Displaying 1-10 of 21
Sort by:
Attacker Value
Very High
CVE-2023-30013
Disclosure Date: May 05, 2023 (last updated October 08, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.
2
Attacker Value
Unknown
CVE-2024-28639
Disclosure Date: March 16, 2024 (last updated December 18, 2024)
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.
0
Attacker Value
Unknown
CVE-2023-45985
Disclosure Date: October 16, 2023 (last updated October 20, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
0
Attacker Value
Unknown
CVE-2023-45984
Disclosure Date: October 16, 2023 (last updated October 20, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
0
Attacker Value
Unknown
CVE-2023-36950
Disclosure Date: October 16, 2023 (last updated October 19, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
0
Attacker Value
Unknown
CVE-2023-36947
Disclosure Date: October 16, 2023 (last updated October 19, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
0
Attacker Value
Unknown
CVE-2023-33487
Disclosure Date: May 31, 2023 (last updated October 08, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.
0
Attacker Value
Unknown
CVE-2023-33486
Disclosure Date: May 31, 2023 (last updated October 08, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.
0
Attacker Value
Unknown
CVE-2023-33485
Disclosure Date: May 31, 2023 (last updated October 08, 2023)
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
0
Attacker Value
Unknown
CVE-2022-27005
Disclosure Date: March 15, 2022 (last updated February 23, 2025)
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
0
