Cp900l Firmware (Totolink) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-05-28. Vendor: Totolink.
CVEs of Cp900l Firmware
- CVE-2024-35403 - CVSS 2.7 (low), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules
- CVE-2024-35401 - CVSS 5.9 (medium), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile…
- CVE-2024-35398 - CVSS 9.8 (critical), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.
- CVE-2024-35397 - CVSS 8.8 (high), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime…
- CVE-2024-35400 - CVSS 5.3 (medium), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules
- CVE-2024-35399 - CVSS 8.8 (high), 2024-05-28: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth
- CVE-2024-35395 - CVSS 8.8 (high), 2024-05-24: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as…
- CVE-2024-35396 - CVSS 9.8 (critical), 2024-05-24: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to…
