CveMateVulnerability intelligence

Totolink Cp300\+ vulnerabilities

7 vulnerabilities

Known vulnerabilities in Totolink Cp300\+, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2024-36782totolinkcp300\+_firmware2y ago03-06-2024 20:09

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.CVE-2023-31856totolinkcp300\+_firmware3y ago16-05-2023 00:00

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.CVE-2023-36954totolinkcp300\+_firmware3y ago16-10-2023 00:00

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.CVE-2023-36955totolinkcp300\+_firmware3y ago16-10-2023 00:00

TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.CVE-2023-36952totolinkcp300\+_firmware3y ago16-10-2023 00:00

TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.CVE-2023-36953totolinkcp300\+_firmware3y ago16-10-2023 00:00

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.CVE-2023-34669totolinkcp300\+_firmware3y ago17-07-2023 00:00

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.