Browse CVEs

MEDIUM 5.5 CVE-2024-1661 A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functional… X6000r Firmware No fix yet Fix from $1,6002024-02-20 HIGH 7.5 CVE-2024-25468 An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_time parameter of the NTPSyncW… X5000r Firmware No fix yet Fix from $1,9502024-02-17 CRITICAL 9.8 CVE-2024-24324 TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow. A8000ru Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24325 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules … A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24326 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpR… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24327 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg fun… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24328EPSS 6% TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24329EPSS 6% TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRul… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24330 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemote… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24331 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCf… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24332 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules fu… A3300r Firmware No fix yet Fix from $2,3002024-01-30 CRITICAL 9.8 CVE-2024-24333 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules fun… A3300r Firmware No fix yet Fix from $2,3002024-01-30 HIGH 8.8 CVE-2024-1003 A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this issue is the function se… N200re Firmware No fix yet Fix from $1,9502024-01-29 HIGH 7.2 CVE-2024-1004 A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the function loginAuth of the fil… N200re Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.8 CVE-2024-1002 A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerability is the function setIpPortFi… N200re Firmware No fix yet Fix from $1,9502024-01-29 CRITICAL 9.8 CVE-2024-1001 A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function main of the file /cgi-bin/cs… N200re Firmware No fix yet Fix from $2,3002024-01-29 HIGH 8.8 CVE-2024-1000 A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg o… N200re Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.8 CVE-2024-0997 A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. Affected by this issue is the function setOpModeCfg of… N200re Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.8 CVE-2024-0998 A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. This affects the function setDiagnosisCfg of … N200re Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.8 CVE-2024-0999 A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setPare… N200re Firmware No fix yet Fix from $1,9502024-01-29 MEDIUM 5.3 CVE-2024-0943 A vulnerability was found in Totolink N350RT 9.3.5u.6255. It has been declared as problematic. Affected by this vulnerability is an unknown functiona… N350rt Firmware Mitigation only Fix from $1,6002024-01-26 MEDIUM 5.3 CVE-2024-0944 A vulnerability was found in Totolink T8 4.1.5cu.833_20220905. It has been rated as problematic. Affected by this issue is some unknown functionality… T8 Firmware Mitigation only Fix from $1,6002024-01-26 CRITICAL 9.8 CVE-2024-22529 TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa. X2000r Firmware No fix yet Fix from $2,3002024-01-25 CRITICAL 9.8 CVE-2023-52038 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function. X6000r Firmware No fix yet Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2023-52039 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function. X6000r Firmware No fix yet Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2023-52040 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function. X6000r Firmware No fix yet Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2024-22660 TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg A3700r Firmware No fix yet Fix from $2,3002024-01-23 CRITICAL 9.8 CVE-2024-22662 TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules A3700r Firmware No fix yet Fix from $2,3002024-01-23 CRITICAL 9.8 CVE-2024-22663 TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg A3700r Firmware No fix yet Fix from $2,3002024-01-23 CRITICAL 9.8 CVE-2023-52042 An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parame… X6000r Firmware No fix yet Fix from $2,3002024-01-16