CVE-2023-27135
https://notcve.org/view.php?id=CVE-2023-27135
23 Mar 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg. • https://github.com/Am1ngl/ttt/tree/main/29 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-25395
https://notcve.org/view.php?id=CVE-2023-25395
08 Mar 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules. • https://github.com/Am1ngl/ttt/tree/main/22 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2023-24184
https://notcve.org/view.php?id=CVE-2023-24184
21 Feb 2023 — TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability. • https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-24236
https://notcve.org/view.php?id=CVE-2023-24236
16 Feb 2023 — TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules. • https://github.com/Am1ngl/ttt/tree/main/19 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-24238
https://notcve.org/view.php?id=CVE-2023-24238
16 Feb 2023 — TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules. • https://github.com/Am1ngl/ttt/tree/main/20 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-24276
https://notcve.org/view.php?id=CVE-2023-24276
06 Feb 2023 — TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules. • https://github.com/Am1ngl/ttt/tree/main/18 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2022-48121
https://notcve.org/view.php?id=CVE-2022-48121
20 Jan 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function. • https://github.com/Am1ngl/ttt/tree/main/16 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2022-48122
https://notcve.org/view.php?id=CVE-2022-48122
20 Jan 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function. • https://github.com/Am1ngl/ttt/tree/main/17 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2022-48123
https://notcve.org/view.php?id=CVE-2022-48123
20 Jan 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function. • https://github.com/Am1ngl/ttt/tree/main/15 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2022-48124
https://notcve.org/view.php?id=CVE-2022-48124
20 Jan 2023 — TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function. • https://github.com/Am1ngl/ttt/tree/main/14 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •