Cp900 L (Totolink) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-05-28. Vendor: Totolink.

CVEs of Cp900 L

• CVE-2024-35403 - CVSS 2.7 (low), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules
• CVE-2024-35398 - CVSS 9.8 (critical), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.
• CVE-2024-35395 - CVSS 8.8 (high), 2024-05-24: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as…