Totolink

Cp300+ Firmware

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-36955

Exploit
  • EPSS 0.21%
  • Published 16.10.2023 06:15:11
  • Last modified 21.11.2024 08:10:59

TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.

9.8

CVE-2023-36953

Exploit
  • EPSS 2.99%
  • Published 16.10.2023 06:15:10
  • Last modified 21.11.2024 08:10:58

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.

9.8

CVE-2023-36954

Exploit
  • EPSS 2.99%
  • Published 16.10.2023 06:15:10
  • Last modified 21.11.2024 08:10:58

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.

9.8

CVE-2023-36952

Exploit
  • EPSS 0.21%
  • Published 16.10.2023 05:15:49
  • Last modified 21.11.2024 08:10:58

TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.

7.5

CVE-2023-34669

Exploit
  • EPSS 0.08%
  • Published 17.07.2023 17:15:09
  • Last modified 21.11.2024 08:07:31

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.

9.8

CVE-2023-31856

Exploit
  • EPSS 1.79%
  • Published 16.05.2023 15:15:09
  • Last modified 23.01.2025 16:15:29

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.