CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1CVE-2023-7213 – Totolink N350RT HTTP POST Request main stack-based overflow
https://notcve.org/view.php?id=CVE-2023-7213
A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by this vulnerability is the function main of the file /cgi-bin/cstecgi.cgi?action=login&flag=1 of the component HTTP POST Request Handler. The manipulation of the argument v33 leads to stack-based buffer overflow. The attack can be launched remotely. • https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N350RT/2/README.md https://vuldb.com/?ctiid.249769 https://vuldb.com/?id.249769 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1CVE-2023-7187 – Totolink N350RT HTTP POST Request stack-based overflow
https://notcve.org/view.php?id=CVE-2023-7187
A vulnerability was found in Totolink N350RT 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. • https://github.com/jylsec/vuldb/blob/main/TOTOLINK/N350RT/1/README.md https://vuldb.com/?ctiid.249389 https://vuldb.com/?id.249389 • CWE-121: Stack-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-36488
https://notcve.org/view.php?id=CVE-2022-36488
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. Se ha detectado que TOTOLINK N350RT versión V9.3.5u.6139_B20201216, contiene un desbordamiento de pila por medio del parámetro sPort en la función setIpPortFilterRules. • https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/10 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-36487
https://notcve.org/view.php?id=CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg. Se ha detectado que TOTOLINK N350RT versión V9.3.5u.6139_B20201216, contiene una vulnerabilidad de inyección de comandos por medio del parámetro command en la función setTracerouteCfg. • https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/2 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-36486
https://notcve.org/view.php?id=CVE-2022-36486
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. Se ha detectado que TOTOLINK N350RT versión V9.3.5u.6139_B20201216, contiene una vulnerabilidad de inyección de comandos por medio del parámetro FileName en la función UploadFirmwareFile. • https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/4 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •