Vulnerabilities

TI-2024-06919 CVE-2024-7465 · GHSA-wcjc-h4xr-66w9

TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01349 Published 2024-08-05 No fix listed CWE-120

TI-2024-06793 CVE-2024-7332 · GHSA-2pxp-hm79-mvqx

TOTOLINK CP450 Telnet Service product.ini hard-coded password

HIGH 81

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.20737 Published 2024-08-01 No fix listed CWE-259

TI-2024-22631 CVE-2024-34209 · GHSA-vgwc-m3fq-wv9x

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

HIGH 82

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00936 Published 2024-05-09 No fix listed CWE-121

TI-2024-22635 CVE-2024-34213 · GHSA-gh8g-37ff-mvrg

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

MEDIUM 51

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00936 Published 2024-05-09 No fix listed CWE-121

TI-2024-22623 CVE-2024-34200 · GHSA-7q29-7r79-pg2f

TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer…

MEDIUM 42

TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00909 Published 2024-05-09 No fix listed CWE-125

TI-2024-22624 CVE-2024-34201 · GHSA-wr78-jhjx-h77g

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

LOW 33

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00554 Published 2024-05-09 No fix listed CWE-121

TI-2024-22625 CVE-2024-34202 · GHSA-hxxh-fvrv-f5f5

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

MEDIUM 62

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00677 Published 2024-05-09 No fix listed CWE-121

TI-2024-22626 CVE-2024-34203 · GHSA-9656-q4mh-5w45

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

MEDIUM 51

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00586 Published 2024-05-09 No fix listed CWE-121

TI-2024-22627 CVE-2024-34204 · GHSA-mqmx-j46x-q6ph

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command…

HIGH 82

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.019 Published 2024-05-09 No fix listed CWE-77

TI-2024-22628 CVE-2024-34205 · GHSA-pvm5-6q5c-5jfp

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection…

LOW 34

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01171 Published 2024-05-09 No fix listed CWE-78

TI-2024-22629 CVE-2024-34206 · GHSA-c4p6-9xvf-x54w

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command…

MEDIUM 64

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01336 Published 2024-05-09 No fix listed CWE-77

TI-2024-22630 CVE-2024-34207 · GHSA-v43c-gjm6-v4wg

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

HIGH 73

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00793 Published 2024-05-09 No fix listed CWE-121

TI-2024-22637 CVE-2024-34217 · GHSA-f6h2-4gm4-fvcj

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

HIGH 69

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00626 Published 2024-05-09 No fix listed CWE-121

TI-2024-22636 CVE-2024-34215 · GHSA-p2hw-rvhj-wg9r

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

HIGH 65

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00554 Published 2024-05-09 No fix listed CWE-121

TI-2024-22632 CVE-2024-34210 · GHSA-55qw-5fwm-j996

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command…

HIGH 67

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01201 Published 2024-05-09 No fix listed CWE-78

TI-2024-22633 CVE-2024-34211 · GHSA-387f-ggqp-ccr9

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password…

HIGH 73

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00547 Published 2024-05-09 No fix listed CWE-259

TI-2024-22634 CVE-2024-34212 · GHSA-x65p-fjpx-x8qr

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow…

HIGH 65

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00554 Published 2024-05-09 No fix listed CWE-121

TI-2024-22639 CVE-2024-34219 · GHSA-24qq-8vc9-wp3m

TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the…

HIGH 78

TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.2076 Published 2024-05-09 No fix listed CWE-798

TI-2024-22638 CVE-2024-34218 · GHSA-mxgq-2jwv-2cc8

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command…

MEDIUM 51

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.17571 Published 2024-05-09 No fix listed CWE-77

Vulnerabilities

Filters