CVE-2023-46555
https://notcve.org/view.php?id=CVE-2023-46555
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formPortFw. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/3/1.md • CWE-787: Out-of-bounds Write •
CVE-2023-46556
https://notcve.org/view.php?id=CVE-2023-46556
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formFilter. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/4/1.md • CWE-787: Out-of-bounds Write •
CVE-2023-46557
https://notcve.org/view.php?id=CVE-2023-46557
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formMultiAPVLAN. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/22/1.md • CWE-787: Out-of-bounds Write •
CVE-2023-46558
https://notcve.org/view.php?id=CVE-2023-46558
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formMapDelDevice. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/25/1.md • CWE-787: Out-of-bounds Write •
CVE-2023-46559
https://notcve.org/view.php?id=CVE-2023-46559
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formIPv6Addr. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/9/1.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-46560
https://notcve.org/view.php?id=CVE-2023-46560
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formTcpipSetup. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/23/1.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-46562
https://notcve.org/view.php?id=CVE-2023-46562
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formDosCfg. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/8/1.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-46563
https://notcve.org/view.php?id=CVE-2023-46563
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formIpQoS. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/7/1.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-46564
https://notcve.org/view.php?id=CVE-2023-46564
25 Oct 2023 — TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. Se descubrió que TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contenía un desbordamiento de pila a través de la función formDMZ. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/6/1.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-46574
https://notcve.org/view.php?id=CVE-2023-46574
24 Oct 2023 — An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. Un problema en TOTOLINK A3700R v.9.1.2u.6165_20211012 permite a un atacante remoto ejecutar código arbitrario a través del parámetro FileName de la función UploadFirmwareFile. • https://github.com/OraclePi/repo/blob/main/totolink%20A3700R/1/A3700R%20%20V9.1.2u.6165_20211012%20vuln.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •