Vulnerabilities > Totolink > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-01-08 | CVE-2023-7218 | Unspecified vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216 A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.6139_B202012. | 7.2 |
2024-01-08 | CVE-2024-0291 | Unspecified vulnerability in Totolink Lr1200Gb Firmware 9.1.0U.6619B20230130 A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. | 8.8 |
2024-01-07 | CVE-2023-7214 | Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216 A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216. | 8.8 |
2024-01-07 | CVE-2023-7213 | Out-of-bounds Write vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216 A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216. | 8.8 |
2023-12-31 | CVE-2023-7187 | Unspecified vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216 A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216. low complexity totolink | 8.8 |
2023-12-06 | CVE-2023-48859 | Incorrect Authorization vulnerability in Totolink A3002Ru Firmware 2.0.0B20190902.1958 TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code. | 8.8 |
2023-11-20 | CVE-2023-48192 | Code Injection vulnerability in Totolink A3700R Firmware 9.1.2U.6134B20201202 An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function. | 7.8 |
2023-10-31 | CVE-2023-46992 | Unspecified vulnerability in Totolink A3300R Firmware 17.0.0Cu.557B20221024 TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. | 7.5 |
2023-10-31 | CVE-2023-46978 | Missing Authentication for Critical Function vulnerability in Totolink X6000R Firmware 9.4.0Cu.852B20230719 TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication. | 7.5 |
2023-10-16 | CVE-2023-45985 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. | 7.5 |