Cp300+ (Totolink) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-06-03. Vendor: Totolink.

CVEs of Cp300+

• CVE-2024-36782 - CVSS 9.8 (critical), 2024-06-03: TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
• CVE-2023-36954 - CVSS 9.8 (critical), 2023-10-16: TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
• CVE-2023-34669 - CVSS 7.5 (high), 2023-07-17: TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.