Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-7177 | TOTOLINK A3600R 4.1.2cu.5182_B20201102 /cgi-bin/cstecgi.cgi setLanguageCfg langType buffer overflow


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument langType leads to buffer overflow. This vulnerability is traded as CVE-2024-7177. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2022-34993 | TOTOLINK A3600R 4.1.2cu.5182_B20201102 /etc/shadow.sample hard-coded credentials


📈 85.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32449 | TOTOLINK EX300 4.0.3c.7484 MQTT Data Packet setLanguageCfg langType command injection


📈 71.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-51020 | Totolink EX1800T 9.1.0cu.2112_B20220316 cstecgi.cgi setLanguageCfg langType Privilege Escalation


📈 57.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41517 | TOTOLINK NR1800X 9.1.0u.6279_B20210910 setLanguageCfg lang stack-based overflow


📈 46.54 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45984 | Totolink X5000R/A7000R 9.1.0 setLanguageCfg lang stack-based overflow


📈 46.54 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36952 | Totolink CP300+ 5.2cu.7594_B20200910 setDiagnosisCfg pingIp stack-based overflow


📈 41.53 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36955 | Totolink CP300+ up to 5.2cu.7594_B20200910 UploadCustomModule File stack-based overflow


📈 41.53 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36482 | TOTOLINK N350RT 9.3.5u.6139_B20201216 setLanguageCfg lang command injection


📈 41.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-37078 | TOTOLINK A7000R 9.1.0u.6115_B20201022 /setting/setLanguageCfg lang command injection


📈 41.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-42877 | TOTOLINK EX1200T 4.1.2cu.5215 lib/cste_modules/system RebootSystem denial of service


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36616 | TOTOLINK A810R 4.1.2cu.5182_B20201026/5.9c.4050_B20190424 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36615 | TOTOLINK A3000RU 4.1.2cu.5185_B20201128 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36614 | TOTOLINK A860R 4.1.2cu.5182_B20201027 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36612 | TOTOLINK A950RG 4.1.2cu.5204_B20210112 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36611 | TOTOLINK A800R 4.1.2cu.5137_B20200730 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-37841 | TOTOLINK A860R 4.1.2cu.5182_B20201027 /etc/shadow.sample hard-coded password


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36954 | Totolink CP300+ up to 5.2cu.7594_B20200910 command injection


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36953 | Totolink CP300+ up to 5.2cu.7594_B20200910 command injection


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-52032 | Totolink EX1200T 4.1.2cu.5232_B20210713 main Privilege Escalation


📈 36.18 Punkte
🕵️ Sicherheitslücken

🕵️ EPiServer Ektron CMS up to 9.10 workarea.aspx page/action/folder_id/LangType cross site scripting


📈 30.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-51022 | Totolink EX1800T 9.1.0cu.2112_B20220316 cstecgi.cgi setLanguageCfg langFlag Privilege Escalation


📈 26.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44255 | TOTOLINK LR350 9.3.5u.6369_B20220309 buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44254 | TOTOLINK LR350 9.3.5u.6369_B20220309 setSmsCfg buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44260 | TOTOLINK LR350 9.3.5u.6369_B20220309 setIpPortFilterRules sPort/ePort buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44259 | TOTOLINK LR350 9.3.5u.6369_B20220309 setParentalRules week/sTime/eTime buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44258 | TOTOLINK LR350 9.3.5u.6369_B20220309 setTracerouteCfg command buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44257 | TOTOLINK LR350 9.3.5u.6369_B20220309 setOpModeCfg pppoeUser buffer overflow


📈 26.34 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Multiple Huawei Smart Phones Drivers Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.75 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Multiple Huawei Smart Phones Drivers Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.75 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Emerson Ovation OCR400 Controller Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32047 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00412ef4 desc stack-based overflow


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32046 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_0041880c desc stack-based overflow


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32045 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00413be4 desc stack-based overflow


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32044 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00413f80 password stack-based overflow


📈 19.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32053 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_0041621c cloneMac stack-based overflow


📈 19.82 Punkte
🕵️ Sicherheitslücken

matomo
•