Totolink A3300R vulnerabilities, page 4

65 vulnerabilities

Known vulnerabilities in Totolink A3300R, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2023-37170totolinka3300r_firmware
EPSS score
1.68%
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.9.8CVE-2023-37172totolinka3300r_firmware
EPSS score
1.96%
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.7.5CVE-2023-46992totolinka3300r_firmware
EPSS score
0.54%
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Attackers are able to reset serveral critical passwords without authentication by visiting specific pages.9.8CVE-2023-46993totolinka3300r_firmware
EPSS score
1.52%
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.9.8CVE-2023-46976totolinka3300r_firmware
EPSS score
1.52%
TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.