Browse CVEs

CRITICAL 9.8 CVE-2023-52041 An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd progra… X6000r Firmware No fix yet Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0579 A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDe… X2000r Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0578 A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the … Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0576 A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIp… Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0577 A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg o… Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0574 A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRu… Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0575 A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg … Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0573 A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this vulnerability is the function … Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0572 A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the… Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2024-0571 A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsC… Lr1200gb Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.1 CVE-2024-0570 A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi… N350rt Firmware Mitigation only Fix from $2,3002024-01-16 CRITICAL 9.1 CVE-2024-0569 A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /… T8 Firmware No fix yet Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2023-52026 TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of… Ex1800t Firmware No fix yet Fix from $2,3002024-01-12 CRITICAL 9.8 CVE-2024-23059 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg func… A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2024-23060 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function. A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2024-23061 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg fu… A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2024-22942 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg funct… A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2024-23057 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function. A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2024-23058 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg functio… A3300r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52027 TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost function. A3700r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52028 TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function. A3700r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52029 TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function. A3700r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52030 TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function. A3700r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52031 TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function. A3700r Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-52032 TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function. Ex1200t Firmware No fix yet Fix from $2,3002024-01-11 CRITICAL 9.1 CVE-2022-46025 Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system inform… N200re V5 Firmware Patch available Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2023-7222 A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmul… X2000r Firmware No fix yet Fix from $2,3002024-01-09 MEDIUM 6.5 CVE-2023-7223 A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cst… T6 Firmware No fix yet Fix from $1,6002024-01-09 CRITICAL 9.8 CVE-2023-7221 A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-… T6 Firmware No fix yet Fix from $2,3002024-01-09 CRITICAL 9.8 CVE-2023-7220 A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of t… Nr1800x Firmware No fix yet Fix from $2,3002024-01-09