VYPR

Lr1200 Firmware

by Totolink

CVEs (2)

  • CVE-2024-7215MedJul 30, 2024
    risk 0.41cvss 6.3epss 0.03

    A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832 and classified as critical. Affected by this issue is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument host_time leads to command injection. The attack may be launched…

  • CVE-2024-7216LowJul 30, 2024
    risk 0.17cvss 2.6epss 0.00

    A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The complexity of an attack is rather high. The exploitability is…