Vulnerabilities > Totolink > Cp300 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-10-16 CVE-2023-36953 Command Injection vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594B20200910
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
network
low complexity
totolink CWE-77
critical
9.8
2023-10-16 CVE-2023-36954 Command Injection vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594B20200910
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
network
low complexity
totolink CWE-77
critical
9.8
2023-10-16 CVE-2023-36955 Out-of-bounds Write vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594/5.2Cu.7594B20200910
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
network
low complexity
totolink CWE-787
critical
9.8
2023-10-16 CVE-2023-36952 Out-of-bounds Write vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594B20200910
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
network
low complexity
totolink CWE-787
critical
9.8
2023-07-17 CVE-2023-34669 Unspecified vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
network
low complexity
totolink
7.5
2023-05-16 CVE-2023-31856 Command Injection vulnerability in Totolink Cp300+ Firmware 5.2Cu.7594B20200910
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
network
low complexity
totolink CWE-77
critical
9.8