Vendor CVEs

Totolink

All CVEs

1,253 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-48066	Totolink A830R	Cri	0.64	9.8	0.02	Jan 27, 2023	An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.
CVE-2022-48126	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48125	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48124	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48123	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.
CVE-2022-48122	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.
CVE-2022-48121	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 20, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.
CVE-2022-47853	Totolink A7100RU	Cri	0.64	9.8	0.02	Jan 17, 2023	TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.
CVE-2022-46634	Totolink A7100RU	Cri	0.64	9.8	0.02	Dec 15, 2022	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function.
CVE-2022-46631	Totolink A7100RU	Cri	0.64	9.8	0.02	Dec 15, 2022	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiSignalCfg function.
CVE-2022-44844	Totolink A7100RU	Cri	0.64	9.8	0.02	Nov 25, 2022	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.
CVE-2022-44843	Totolink A7100RU	Cri	0.64	9.8	0.02	Nov 25, 2022	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44255	Totolink LR350	Cri	0.64	9.8	0.02	Nov 23, 2022	TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
CVE-2022-44252	Totolink NR1800X	Cri	0.64	9.8	0.02	Nov 23, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.
CVE-2022-44251	Totolink NR1800X	Cri	0.64	9.8	0.02	Nov 23, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.
CVE-2022-44250	Totolink NR1800X	Cri	0.64	9.8	0.02	Nov 23, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.
CVE-2022-44249	Totolink NR1800X	Cri	0.64	9.8	0.02	Nov 23, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.
CVE-2022-41525	Totolink NR1800X	Cri	0.64	9.8	0.02	Oct 6, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
CVE-2022-41522	Totolink NR1800X	Cri	0.64	9.8	0.01	Oct 6, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
CVE-2022-41518	Totolink NR1800X	Cri	0.64	9.8	0.02	Oct 6, 2022	TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.
CVE-2022-40475	Totolink A860R	Cri	0.64	9.8	0.03	Sep 29, 2022	TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
CVE-2022-38826	Totolink T6	Cri	0.64	9.8	0.01	Sep 16, 2022	In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVE-2022-38823	Totolink T6	Cri	0.64	9.8	0.01	Sep 16, 2022	In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVE-2022-40111	Totolink A3002r Firmware	Cri	0.64	9.8	0.01	Sep 6, 2022	In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.
CVE-2022-40109	Totolink A3002r Firmware	Cri	0.64	9.8	0.01	Sep 6, 2022	TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.
CVE-2022-37843	Totolink A860R	Cri	0.64	9.8	0.02	Sep 6, 2022	In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
CVE-2022-37842	Totolink A860R	Cri	0.64	9.8	0.01	Sep 6, 2022	In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
CVE-2022-37840	Totolink A860R	Cri	0.64	9.8	0.01	Sep 6, 2022	In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
CVE-2022-37839	Totolink A860R	Cri	0.64	9.8	0.01	Sep 6, 2022	TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
CVE-2022-32993	Totolink A7000R	Cri	0.64	9.8	0.01	Aug 29, 2022	TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.
CVE-2022-35491	Totolink A3002RU	Cri	0.64	9.8	0.01	Aug 10, 2022	TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
CVE-2022-34993	Totolink A3600R	Cri	0.64	9.8	0.01	Aug 4, 2022	Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
CVE-2021-42890	Totolink EX1200T	Cri	0.64	9.8	0.02	Jun 3, 2022	TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
CVE-2021-42888	Totolink EX1200T	Cri	0.64	9.8	0.02	Jun 3, 2022	TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
CVE-2021-42885	Totolink EX1200T	Cri	0.64	9.8	0.02	Jun 3, 2022	TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
CVE-2021-42884	Totolink EX1200T	Cri	0.64	9.8	0.02	Jun 3, 2022	TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
CVE-2021-42875	Totolink EX1200T	Cri	0.64	9.8	0.04	Jun 2, 2022	TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVE-2021-42872	Totolink EX1200T	Cri	0.64	9.8	0.07	Jun 2, 2022	TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVE-2022-29645	Totolink A3100R	Cri	0.64	9.8	0.01	May 18, 2022	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
CVE-2022-29644	Totolink A3100R	Cri	0.64	9.8	0.02	May 18, 2022	TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
CVE-2022-29399	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.
CVE-2022-29398	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.
CVE-2022-29397	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.
CVE-2022-29396	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.
CVE-2022-29395	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.
CVE-2022-29394	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.
CVE-2022-29393	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc.
CVE-2022-29392	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
CVE-2022-29391	Totolink N600R	Cri	0.64	9.8	0.02	May 10, 2022	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
CVE-2022-28913	Totolink N600R	Cri	0.64	9.8	0.03	May 10, 2022	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting.

CVE-2022-48066CriJan 27, 2023
Totolink
A830R
risk 0.64cvss 9.8epss 0.02
An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.
CVE-2022-48126CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48125CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48124CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48123CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.
CVE-2022-48122CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.
CVE-2022-48121CriJan 20, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.
CVE-2022-47853CriJan 17, 2023
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.
CVE-2022-46634CriDec 15, 2022
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function.
CVE-2022-46631CriDec 15, 2022
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiSignalCfg function.
CVE-2022-44844CriNov 25, 2022
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.
CVE-2022-44843CriNov 25, 2022
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44255CriNov 23, 2022
Totolink
LR350
risk 0.64cvss 9.8epss 0.02
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
CVE-2022-44252CriNov 23, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.
CVE-2022-44251CriNov 23, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.
CVE-2022-44250CriNov 23, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.
CVE-2022-44249CriNov 23, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.
CVE-2022-41525CriOct 6, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
CVE-2022-41522CriOct 6, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.01
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
CVE-2022-41518CriOct 6, 2022
Totolink
NR1800X
risk 0.64cvss 9.8epss 0.02
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.
CVE-2022-40475CriSep 29, 2022
Totolink
A860R
risk 0.64cvss 9.8epss 0.03
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
CVE-2022-38826CriSep 16, 2022
Totolink
T6
risk 0.64cvss 9.8epss 0.01
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVE-2022-38823CriSep 16, 2022
Totolink
T6
risk 0.64cvss 9.8epss 0.01
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVE-2022-40111CriSep 6, 2022
Totolink
A3002r Firmware
risk 0.64cvss 9.8epss 0.01
In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.
CVE-2022-40109CriSep 6, 2022
Totolink
A3002r Firmware
risk 0.64cvss 9.8epss 0.01
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.
CVE-2022-37843CriSep 6, 2022
Totolink
A860R
risk 0.64cvss 9.8epss 0.02
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
CVE-2022-37842CriSep 6, 2022
Totolink
A860R
risk 0.64cvss 9.8epss 0.01
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
CVE-2022-37840CriSep 6, 2022
Totolink
A860R
risk 0.64cvss 9.8epss 0.01
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
CVE-2022-37839CriSep 6, 2022
Totolink
A860R
risk 0.64cvss 9.8epss 0.01
TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
CVE-2022-32993CriAug 29, 2022
Totolink
A7000R
risk 0.64cvss 9.8epss 0.01
TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.
CVE-2022-35491CriAug 10, 2022
Totolink
A3002RU
risk 0.64cvss 9.8epss 0.01
TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
CVE-2022-34993CriAug 4, 2022
Totolink
A3600R
risk 0.64cvss 9.8epss 0.01
Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
CVE-2021-42890CriJun 3, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.02
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
CVE-2021-42888CriJun 3, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.02
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
CVE-2021-42885CriJun 3, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.02
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
CVE-2021-42884CriJun 3, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.02
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
CVE-2021-42875CriJun 2, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.04
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVE-2021-42872CriJun 2, 2022
Totolink
EX1200T
risk 0.64cvss 9.8epss 0.07
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVE-2022-29645CriMay 18, 2022
Totolink
A3100R
risk 0.64cvss 9.8epss 0.01
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
CVE-2022-29644CriMay 18, 2022
Totolink
A3100R
risk 0.64cvss 9.8epss 0.02
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
CVE-2022-29399CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.
CVE-2022-29398CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.
CVE-2022-29397CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.
CVE-2022-29396CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.
CVE-2022-29395CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.
CVE-2022-29394CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.
CVE-2022-29393CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc.
CVE-2022-29392CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
CVE-2022-29391CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.02
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
CVE-2022-28913CriMay 10, 2022
Totolink
N600R
risk 0.64cvss 9.8epss 0.03
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting.

Page 9 of 26