Totolink vulnerabilities, page 4

1,303 vulnerabilities

Known vulnerabilities in Totolink products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 90 products.

9.8CriticalCVE-2021-43636totolink · t10_v2_firmwaretotolink t10_v2_firmwareTwo Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function when processing host data in the HTTP request process.EPSS1.07%6.1MediumCVE-2021-43661totolink · ex300_v2_firmwaretotolink ex300_v2_firmwaretotolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.EPSS0.64%9.3CriticalCVE-2021-43664totolink · ex300_v2_firmwaretotolink ex300_v2_firmwaretotolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process&nbsp;forceugpo.EPSS1.67%7.9HighCVE-2021-43663totolink · ex300_v2_firmwaretotolink ex300_v2_firmwaretotolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.EPSS0.96%10CriticalCVE-2021-27710totolink · a720r_firmware +1 moretotolink a720r_firmwareCommand Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system function with untrusted input. In the function, "ip" parameter is directly passed to the attacker, allowing them to control the "ip" field to attack the OS.EPSS7.90%10CriticalCVE-2021-27708totolink · a720r_firmware +1 moretotolink a720r_firmwareCommand Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system function with untrusted input. In the function, "command" parameter is directly passed to the attacker, allowing them to control the "command" field to attack the OS.EPSS7.61%8.8HighCVE-2021-46010totolink · a3100r_firmwaretotolink a3100r_firmwareTotolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.EPSS1.24%10CriticalCVE-2021-46007totolink · ar3100r_firmwaretotolink ar3100r_firmwaretotolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.EPSS2.59%8.8HighCVE-2021-46008totolink · a3100r_firmwaretotolink a3100r_firmwareIn totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on.EPSS0.92%6.5MediumCVE-2021-46006totolink · a3100r_firmwaretotolink a3100r_firmwareIn Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.EPSS5.50%10CriticalCVE-2021-46009totolink · a3100r_firmwaretotolink a3100r_firmwareIn Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.EPSS12.53%9.8CriticalCVE-2021-44620totolink · a3100r_firmwaretotolink a3100r_firmwareA Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.EPSS1.35%9.8CriticalCVE-2021-44247totolink · a3100r_firmware +2 moretotolink a3100r_firmwareTotolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter.EPSS2.78%7.8HighCVE-2021-44246totolink · a3100r_firmware +2 moretotolink a3100r_firmwareTotolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter.EPSS1.18%7.8HighCVE-2021-45737totolink · a720r_firmwaretotolink a720r_firmwareTOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host parameter.EPSS1.18%10CriticalCVE-2021-45733totolink · x5000r_firmwaretotolink x5000r_firmwareTOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.EPSS4.39%10CriticalCVE-2021-45742totolink · a720r_firmwaretotolink a720r_firmwareTOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.EPSS3.07%7.5HighCVE-2021-45735totolink · x5000r_firmwaretotolink x5000r_firmwareTOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software.EPSS3.80%7.8HighCVE-2021-45741totolink · x5000r_firmwaretotolink x5000r_firmwareTOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 parameters.EPSS1.18%9.8CriticalCVE-2021-45740totolink · a720r_firmwaretotolink a720r_firmwareTOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin parameter.EPSS1.36%