Totolink

Cp450 Firmware

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2026-85031

  • EPSS 0.58%
  • Veröffentlicht 03.09.2026 02:00:13
  • Zuletzt bearbeitet 03.09.2026 17:25:25

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possi...

4.3

CVE-2026-11554

Exploit
  • EPSS 0.21%
  • Veröffentlicht 08.06.2026 17:30:11
  • Zuletzt bearbeitet 23.07.2026 07:10:00

A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least privilege violation. The attack may be initiated remotely. The ...

9.8

CVE-2024-7465

Exploit
  • EPSS 1.35%
  • Veröffentlicht 05.08.2024 02:16:03
  • Zuletzt bearbeitet 15.08.2024 13:11:59

A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. It is poss...

9.8

CVE-2024-7332

Exploit
  • EPSS 20.74%
  • Veröffentlicht 01.08.2024 01:15:09
  • Zuletzt bearbeitet 09.08.2024 13:55:52

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded...

8.6

CVE-2024-34219

Exploit
  • EPSS 20.76%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 04.04.2025 14:47:06

TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.

3.8

CVE-2024-34218

Exploit
  • EPSS 17.57%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 04.04.2025 14:47:14

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.

7.7

CVE-2024-34217

Exploit
  • EPSS 0.63%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 09.04.2025 14:15:10

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function.

7.3

CVE-2024-34215

Exploit
  • EPSS 0.55%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 09.04.2025 14:15:16

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.

9.8

CVE-2024-34213

Exploit
  • EPSS 0.94%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 09.04.2025 14:15:23

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.

7.3

CVE-2024-34212

Exploit
  • EPSS 0.55%
  • Veröffentlicht 14.05.2024 15:38:35
  • Zuletzt bearbeitet 09.04.2025 14:15:33

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.