Vulnerabilities > Totolink > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-25 CVE-2022-36485 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-36486 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-36487 OS Command Injection vulnerability in Totolink N350Rt Firmware 9.3.5U.6139B20201216
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.
local
low complexity
totolink CWE-78
7.8
2022-08-25 CVE-2022-37076 OS Command Injection vulnerability in Totolink A7000R Firmware 9.1.0U.6115B20201022
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
local
low complexity
totolink CWE-78
7.8
2022-07-01 CVE-2022-32044 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.
network
low complexity
totolink CWE-787
7.5
2022-07-01 CVE-2022-32045 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.
network
low complexity
totolink CWE-787
7.5
2022-07-01 CVE-2022-32046 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.
network
low complexity
totolink CWE-787
7.5
2022-07-01 CVE-2022-32047 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.
network
low complexity
totolink CWE-787
7.5
2022-07-01 CVE-2022-32048 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.
network
low complexity
totolink CWE-787
7.5
2022-07-01 CVE-2022-32049 Out-of-bounds Write vulnerability in Totolink T6 Firmware 4.1.9Cu.5179B20201015
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.
network
low complexity
totolink CWE-787
7.5