Vendor CVEs

Totolink

All CVEs

1,425 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-52038	Totolink X6000R	Cri	0.64	9.8	0.01	Jan 24, 2024	An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.
CVE-2024-22663	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 23, 2024	TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg
CVE-2024-22662	Totolink A3700R	Cri	0.64	9.8	0.01	Jan 23, 2024	TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
CVE-2024-22660	Totolink A3700R	Cri	0.64	9.8	0.01	Jan 23, 2024	TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
CVE-2023-52042	Totolink X6000R	Cri	0.64	9.8	0.01	Jan 16, 2024	An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.
CVE-2023-52041	Totolink X6000R	Cri	0.64	9.8	0.01	Jan 16, 2024	An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.
CVE-2023-52026	Totolink EX1800T	Cri	0.64	9.8	0.02	Jan 12, 2024	TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface
CVE-2024-23061	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function.
CVE-2024-23060	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function.
CVE-2024-23059	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function.
CVE-2024-23058	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function.
CVE-2024-23057	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function.
CVE-2024-22942	Totolink A3300R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function.
CVE-2023-52032	Totolink EX1200T	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
CVE-2023-52031	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function.
CVE-2023-52030	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.
CVE-2023-52029	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function.
CVE-2023-52028	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.
CVE-2023-52027	Totolink A3700R	Cri	0.64	9.8	0.02	Jan 11, 2024	TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost function.
CVE-2023-7221	Totolink T6	Cri	0.64	9.8	0.02	Jan 9, 2024	A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer…
CVE-2023-7220	Totolink NR1800X	Cri	0.64	9.8	0.01	Jan 9, 2024	A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be…
CVE-2023-50651	Totolink X6000R	Cri	0.64	9.8	0.03	Dec 30, 2023	TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.
CVE-2023-51136	Totolink X2000r Firmware	Cri	0.64	9.8	0.01	Dec 30, 2023	TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-51135	Totolink X2000r Firmware	Cri	0.64	9.8	0.01	Dec 30, 2023	TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51133	Totolink X2000r Firmware	Cri	0.64	9.8	0.01	Dec 30, 2023	TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-51035	Totolink Ex1200l Firmware	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
CVE-2023-51034	Totolink Ex1200l Firmware	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
CVE-2023-51033	Totolink Ex1200l Firmware	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
CVE-2023-51022	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.
CVE-2023-51021	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.
CVE-2023-51020	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi.
CVE-2023-51019	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
CVE-2023-51018	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi.
CVE-2023-51017	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51016	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.
CVE-2023-51015	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi
CVE-2023-51014	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi
CVE-2023-51013	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51012	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51011	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi
CVE-2023-50147	Totolink A3700R	Cri	0.64	9.8	0.01	Dec 22, 2023	There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822_B20200513.
CVE-2023-51028	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.
CVE-2023-51027	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
CVE-2023-51026	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.
CVE-2023-51025	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.
CVE-2023-51024	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.
CVE-2023-51023	Totolink EX1800T	Cri	0.64	9.8	0.01	Dec 22, 2023	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.
CVE-2023-6906	Totolink A7100RU	Cri	0.64	9.8	0.02	Dec 18, 2023	A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8…
CVE-2023-49418	Totolink A7000R	Cri	0.64	9.8	0.01	Dec 11, 2023	TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
CVE-2023-49417	Totolink A7000R	Cri	0.64	9.8	0.01	Dec 11, 2023	TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

CVE-2023-52038CriJan 24, 2024
Totolink
X6000R
risk 0.64cvss 9.8epss 0.01
An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.
CVE-2024-22663CriJan 23, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg
CVE-2024-22662CriJan 23, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.01
TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
CVE-2024-22660CriJan 23, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.01
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
CVE-2023-52042CriJan 16, 2024
Totolink
X6000R
risk 0.64cvss 9.8epss 0.01
An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.
CVE-2023-52041CriJan 16, 2024
Totolink
X6000R
risk 0.64cvss 9.8epss 0.01
An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.
CVE-2023-52026CriJan 12, 2024
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.02
TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface
CVE-2024-23061CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function.
CVE-2024-23060CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function.
CVE-2024-23059CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function.
CVE-2024-23058CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function.
CVE-2024-23057CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function.
CVE-2024-22942CriJan 11, 2024
Totolink
A3300R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function.
CVE-2023-52032CriJan 11, 2024
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.02
TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
CVE-2023-52031CriJan 11, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function.
CVE-2023-52030CriJan 11, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.
CVE-2023-52029CriJan 11, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function.
CVE-2023-52028CriJan 11, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.
CVE-2023-52027CriJan 11, 2024
Totolink
A3700R
risk 0.64cvss 9.8epss 0.02
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost function.
CVE-2023-7221CriJan 9, 2024
Totolink
T6
risk 0.64cvss 9.8epss 0.02
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer…
CVE-2023-7220CriJan 9, 2024
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.01
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be…
CVE-2023-50651CriDec 30, 2023
Totolink
X6000R
risk 0.64cvss 9.8epss 0.03
TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.
CVE-2023-51136CriDec 30, 2023
Totolink
X2000r Firmware
risk 0.64cvss 9.8epss 0.01
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-51135CriDec 30, 2023
Totolink
X2000r Firmware
risk 0.64cvss 9.8epss 0.01
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51133CriDec 30, 2023
Totolink
X2000r Firmware
risk 0.64cvss 9.8epss 0.01
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-51035CriDec 22, 2023
Totolink
Ex1200l Firmware
risk 0.64cvss 9.8epss 0.01
TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
CVE-2023-51034CriDec 22, 2023
Totolink
Ex1200l Firmware
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
CVE-2023-51033CriDec 22, 2023
Totolink
Ex1200l Firmware
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
CVE-2023-51022CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.
CVE-2023-51021CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.
CVE-2023-51020CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi.
CVE-2023-51019CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
CVE-2023-51018CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi.
CVE-2023-51017CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51016CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.
CVE-2023-51015CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi
CVE-2023-51014CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi
CVE-2023-51013CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51012CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi.
CVE-2023-51011CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi
CVE-2023-50147CriDec 22, 2023
Totolink
A3700R
risk 0.64cvss 9.8epss 0.01
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822_B20200513.
CVE-2023-51028CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.
CVE-2023-51027CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
CVE-2023-51026CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.
CVE-2023-51025CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.
CVE-2023-51024CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.
CVE-2023-51023CriDec 22, 2023
Totolink
EX1800T
risk 0.64cvss 9.8epss 0.01
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.
CVE-2023-6906CriDec 18, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8…
CVE-2023-49418CriDec 11, 2023
Totolink
A7000R
risk 0.64cvss 9.8epss 0.01
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
CVE-2023-49417CriDec 11, 2023
Totolink
A7000R
risk 0.64cvss 9.8epss 0.01
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

Page 6 of 29