Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,480

Export CSV
CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37080

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-36616

TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A810r A810r Firmware
CVE-2022-36614

TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A860r A860r Firmware
CVE-2022-36613

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
N600r N600r Firmware
CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A800r A800r Firmware
CVE-2022-36610

TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A720r A720r Firmware
CVE-2022-36488

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
N350rt N350rt Firmware
CVE-2022-36487

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
N350rt N350rt Firmware
CVE-2022-36486

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
N350rt N350rt Firmware
CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
N350rt N350rt Firmware