Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-7174 | TOTOLINK A3600R 4.1.2cu.5182_B20201102 /cgi-bin/cstecgi.cgi setdeviceName deviceMac/deviceName buffer overflow


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setdeviceName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument deviceMac/deviceName leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-7174. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2022-34993 | TOTOLINK A3600R 4.1.2cu.5182_B20201102 /etc/shadow.sample hard-coded credentials


📈 85.81 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-45645 | Tenda AC6 15.03.05.19 addWifiMacFilter deviceMac buffer overflow


📈 41.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-46532 | Tenda F1203 2.0.1.6 /goform/addWifiMacFilter deviceMac buffer overflow


📈 41.96 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36952 | Totolink CP300+ 5.2cu.7594_B20200910 setDiagnosisCfg pingIp stack-based overflow


📈 41.51 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36955 | Totolink CP300+ up to 5.2cu.7594_B20200910 UploadCustomModule File stack-based overflow


📈 41.51 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-42877 | TOTOLINK EX1200T 4.1.2cu.5215 lib/cste_modules/system RebootSystem denial of service


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36616 | TOTOLINK A810R 4.1.2cu.5182_B20201026/5.9c.4050_B20190424 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36615 | TOTOLINK A3000RU 4.1.2cu.5185_B20201128 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36614 | TOTOLINK A860R 4.1.2cu.5182_B20201027 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36612 | TOTOLINK A950RG 4.1.2cu.5204_B20210112 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36611 | TOTOLINK A800R 4.1.2cu.5137_B20200730 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-37841 | TOTOLINK A860R 4.1.2cu.5182_B20201027 /etc/shadow.sample hard-coded password


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36954 | Totolink CP300+ up to 5.2cu.7594_B20200910 command injection


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36953 | Totolink CP300+ up to 5.2cu.7594_B20200910 command injection


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-52032 | Totolink EX1200T 4.1.2cu.5232_B20210713 main Privilege Escalation


📈 36.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-12131 | AirDisk Pro App 5.5.3 on iOS devicename cross site scripting


📈 31.45 Punkte
🕵️ Sicherheitslücken

🕵️ OpenBSD 5.8/5.9 tmpfs username/groupname/devicename Kernel Panic Denial of Service


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ Kentico 9/10/11 devicename Reflected Cross Site Scripting [Infragegestellt]


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ OpenBSD 5.8/5.9 tmpfs username/groupname/devicename Kernel Panic denial of service


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ Kentico CMS 8.x/9.x/10.x/11.0 devicename Reflected cross site scripting [Disputed]


📈 30.31 Punkte
🕵️ Sicherheitslücken

🕵️ Tenda AC7/AC9/AC10/AC15/AC18 Web Server deviceMac Stack-based memory corruption


📈 28.95 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44255 | TOTOLINK LR350 9.3.5u.6369_B20220309 buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44254 | TOTOLINK LR350 9.3.5u.6369_B20220309 setSmsCfg buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44260 | TOTOLINK LR350 9.3.5u.6369_B20220309 setIpPortFilterRules sPort/ePort buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44259 | TOTOLINK LR350 9.3.5u.6369_B20220309 setParentalRules week/sTime/eTime buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44258 | TOTOLINK LR350 9.3.5u.6369_B20220309 setTracerouteCfg command buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-44257 | TOTOLINK LR350 9.3.5u.6369_B20220309 setOpModeCfg pppoeUser buffer overflow


📈 26.31 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Multiple Huawei Smart Phones Drivers Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.73 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Multiple Huawei Smart Phones Drivers Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.73 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Emerson Ovation OCR400 Controller Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities


📈 23.73 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32047 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00412ef4 desc stack-based overflow


📈 19.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32046 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_0041880c desc stack-based overflow


📈 19.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32045 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00413be4 desc stack-based overflow


📈 19.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32044 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_00413f80 password stack-based overflow


📈 19.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-32053 | TOTOLINK T6 4.1.9cu.5179_B20201015 FUN_0041621c cloneMac stack-based overflow


📈 19.79 Punkte
🕵️ Sicherheitslücken

matomo
•