Vulnerability index

Browse CVEs

1,082 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2023-36954 TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Cp300\+ Firmware No fix yet Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-36340 TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. Nr1800x Firmware No fix yet Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-36947 TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter i… X5000r Firmware No fix yet Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-36952 TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg. Cp300\+ Firmware No fix yet Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-43141 TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control. A3700r Firmware Mitigation only Fix from $2,3002023-09-25 HIGH 8.8 CVE-2023-4746 A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The mani… N200re V5 Firmware No fix yet Fix from $1,9502023-09-04 CRITICAL 9.8 CVE-2023-39617 TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via… X5000r Firmware No fix yet Fix from $2,3002023-08-21 CRITICAL 9.8 CVE-2023-39618 TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. X5000r Firmware No fix yet Fix from $2,3002023-08-21 CRITICAL 9.8 CVE-2023-4412 A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The ma… Ex1200l Firmware No fix yet Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-4411EPSS 5% A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setT… Ex1200l Firmware No fix yet Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-4410 A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg… Ex1200l Firmware No fix yet Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-40041 TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted dat… T10 V2 Firmware No fix yet Fix from $2,3002023-08-08 CRITICAL 9.8 CVE-2023-40042 TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted … T10 V2 Firmware No fix yet Fix from $2,3002023-08-08 HIGH 7.5 CVE-2023-34669 TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot … Cp300\+ Firmware No fix yet Fix from $1,9502023-07-17 CRITICAL 9.8 CVE-2023-37170 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter… A3300r Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37171 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg f… A3300r Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37172 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg funct… A3300r Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37173 TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg… A3300r Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37145 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg func… Lr350 Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37146 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFil… Lr350 Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37148 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function. Lr350 Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-37149 TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting … Lr350 Firmware No fix yet Fix from $2,3002023-07-07 CRITICAL 9.8 CVE-2023-33556 TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-06-07 CRITICAL 9.8 CVE-2023-31569 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function. X5000r Firmware Mitigation only Fix from $2,3002023-06-06 CRITICAL 9.8 CVE-2023-33486 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allow… X5000r Firmware No fix yet Fix from $2,3002023-05-31 CRITICAL 9.8 CVE-2023-33487 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability al… X5000r Firmware No fix yet Fix from $2,3002023-05-31 HIGH 8.8 CVE-2023-33485 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the add… X5000r Firmware No fix yet Fix from $1,9502023-05-31 MEDIUM 5.5 CVE-2023-2790 A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squas… N200re Firmware No fix yet Fix from $1,6002023-05-18 CRITICAL 9.8 CVE-2023-31729 TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. A3300r Firmware Mitigation only Fix from $2,3002023-05-18 CRITICAL 9.8 CVE-2023-31856 A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers … Cp300\+ Firmware No fix yet Fix from $2,3002023-05-16