Vulnerability index

Browse CVEs

1,039 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

X6000r Firmware CRITICAL 9.8
CVE-2023-43454

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the hostName par…

No fix yet
Fix from $2,300 2023-12-01
X6000r Firmware CRITICAL 9.8
CVE-2023-43455

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command para…

No fix yet
Fix from $2,300 2023-12-01
X6000r Firmware CRITICAL 9.8
CVE-2023-48808

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48810

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48811

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48812

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function t…

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48802

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48803

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48804

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48805

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48806

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
X6000r Firmware CRITICAL 9.8
CVE-2023-48807

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function …

No fix yet
Fix from $2,300 2023-11-30
A3700r Firmware HIGH 7.8
CVE-2023-48192

An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.

No fix yet
Fix from $1,950 2023-11-20
X6000r Firmware CRITICAL 9.8
CVE-2023-46484

An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.

No fix yet
Fix from $2,300 2023-10-31
X6000r Firmware CRITICAL 9.8
CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi…

No fix yet
Fix from $2,300 2023-10-31
A3300r Firmware CRITICAL 9.8
CVE-2023-46993

In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to …

No fix yet
Fix from $2,300 2023-10-31
A3300r Firmware HIGH 7.5
CVE-2023-46992

TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without au…

No fix yet
Fix from $1,950 2023-10-31
A3300r Firmware CRITICAL 9.8
CVE-2023-46976

TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.

No fix yet
Fix from $2,300 2023-10-31
Lr1200gb Firmware CRITICAL 9.8
CVE-2023-46977EPSS 9%

TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.

No fix yet
Fix from $2,300 2023-10-31
X6000r Firmware CRITICAL 9.8
CVE-2023-46979

TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.

No fix yet
Fix from $2,300 2023-10-31
X6000r Firmware HIGH 7.5
CVE-2023-46978

TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authenti…

No fix yet
Fix from $1,950 2023-10-31
X6000r Firmware CRITICAL 9.8
CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46410

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46411

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46412

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46413

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.

No fix yet
Fix from $2,300 2023-10-25
X6000r Firmware CRITICAL 9.8
CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.

No fix yet
Fix from $2,300 2023-10-25