Vulnerability index

Browse CVEs

1,039 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

X5000r Firmware CRITICAL 9.8
CVE-2023-31569

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.

Mitigation only
Fix from $2,300 2023-06-06
X5000r Firmware CRITICAL 9.8
CVE-2023-33486

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allow…

No fix yet
Fix from $2,300 2023-05-31
X5000r Firmware CRITICAL 9.8
CVE-2023-33487

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability al…

No fix yet
Fix from $2,300 2023-05-31
X5000r Firmware HIGH 8.8
CVE-2023-33485

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the add…

No fix yet
Fix from $1,950 2023-05-31
N200re Firmware MEDIUM 5.5
CVE-2023-2790

A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squas…

No fix yet
Fix from $1,600 2023-05-18
A3300r Firmware CRITICAL 9.8
CVE-2023-31729

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.

Mitigation only
Fix from $2,300 2023-05-18
Cp300\+ Firmware CRITICAL 9.8
CVE-2023-31856

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers …

No fix yet
Fix from $2,300 2023-05-16
A7100ru Firmware CRITICAL 9.8
CVE-2023-30053

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

No fix yet
Fix from $2,300 2023-05-05
A7100ru Firmware CRITICAL 9.8
CVE-2023-30054

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially construc…

No fix yet
Fix from $2,300 2023-05-05
X5000r Firmware CRITICAL 9.8
CVE-2023-30013EPSS 26%

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnera…

No fix yet
Fix from $2,300 2023-05-05
X18 Firmware CRITICAL 9.8
CVE-2023-29800

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29801

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parame…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29803

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function.

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29798

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg fu…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29799

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg funct…

No fix yet
Fix from $2,300 2023-04-14
A7100ru Firmware CRITICAL 9.8
CVE-2023-26978

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIe…

No fix yet
Fix from $2,300 2023-04-07
A7100ru Firmware CRITICAL 9.8
CVE-2023-26848

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRul…

No fix yet
Fix from $2,300 2023-04-07
A7100ru Firmware CRITICAL 9.8
CVE-2023-27232

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIe…

No fix yet
Fix from $2,300 2023-03-28
A7100ru Firmware CRITICAL 9.8
CVE-2023-27229

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-28
A7100ru Firmware CRITICAL 9.8
CVE-2023-27231

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-28
Cp900 Firmware CRITICAL 9.8
CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl…

No fix yet
Fix from $2,300 2023-03-24
Cp900 Firmware CRITICAL 9.8
CVE-2022-28496

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminus…

Mitigation only
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28497

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via th…

Mitigation only
Fix from $2,300 2023-03-23
A7100ru Firmware CRITICAL 9.8
CVE-2023-27135

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28491

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter…

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28493

A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,

Mitigation only
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28492

TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28494

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena…

No fix yet
Fix from $2,300 2023-03-23
A7100ru Firmware CRITICAL 9.8
CVE-2023-25395

TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticD…

No fix yet
Fix from $2,300 2023-03-08