Page 4 of 21 results (0.015 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-36463

https://notcve.org/view.php?id=CVE-2022-36463

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. Se ha detectado que TOTOLINK A3700R versión V9.1.2u.6134_B20201202, contiene un desbordamiento de pila por medio del parámetro command en la función setTracerouteCfg. • https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/8/readme.md • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-36462

https://notcve.org/view.php?id=CVE-2022-36462

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. Se ha detectado que TOTOLINK A3700R versión V9.1.2u.6134_B20201202, contiene un desbordamiento de pila por medio del parámetro lang en la función setLanguageCfg. • https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/6/readme.md • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-36461

https://notcve.org/view.php?id=CVE-2022-36461

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg. Se ha detectado que TOTOLINK A3700R versión V9.1.2u.6134_B20201202, contiene una vulnerabilidad de inyección de comandos por medio del parámetro hostName en la función setOpModeCfg. • https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/5/readme.md • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-36459

https://notcve.org/view.php?id=CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost. Se ha detectado que TOTOLINK A3700R versión V9.1.2u.6134_B20201202, contiene una vulnerabilidad de inyección de comandos por medio del parámetro host_time en la función NTPSyncWithHost. • https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/3/readme.md • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-36460

https://notcve.org/view.php?id=CVE-2022-36460

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile. Se ha detectado que TOTOLINK A3700R versión V9.1.2u.6134_B20201202, contiene una vulnerabilidad de inyección de comandos por el parámetro FileName en la función UploadFirmwareFile. • https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/4/readme.md • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •