Vulnerabilities > Totolink
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-07-01 | CVE-2022-32048 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88. | 7.5 |
| 2022-07-01 | CVE-2022-32049 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540. | 7.5 |
| 2022-07-01 | CVE-2022-32050 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40. | 7.5 |
| 2022-07-01 | CVE-2022-32051 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4. | 7.5 |
| 2022-07-01 | CVE-2022-32052 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4. | 7.5 |
| 2022-07-01 | CVE-2022-32053 | Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c. | 7.5 |
| 2022-06-03 | CVE-2021-42893 | Missing Authentication for Critical Function vulnerability in Totolink Ex1200T Firmware 4.1.2Cu.5215 In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg. | 7.5 |
| 2022-06-03 | CVE-2021-42892 | Use of Hard-coded Credentials vulnerability in Totolink Ex1200T Firmware 4.1.2Cu.5215 In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware. | 4.3 |
| 2022-06-03 | CVE-2021-42891 | Missing Authentication for Critical Function vulnerability in Totolink Ex1200T Firmware 4.1.2Cu.5215 In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization. | 7.5 |
| 2022-06-03 | CVE-2021-42889 | Missing Authentication for Critical Function vulnerability in Totolink Ex1200T Firmware 4.1.2Cu.5215 In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization. | 7.5 |