Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,480

Export CSV
CVE-2022-32053

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32052

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32051

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32050

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32048

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32047

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32046

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32045

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-32044

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
T6 T6 Firmware
CVE-2022-29646

An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29642

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29641

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29640

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29639

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.

CVSS 3.1 · 8.1 High EPSS 1.8% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29638

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A3100r A3100r Firmware
CVE-2022-29399

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Totolink
Products
N600r N600r Firmware