CVE-2025-28027
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:27:45
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
CVE-2025-28029
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:28:29
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi
CVE-2025-28026
- EPSS 0.15%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 07.05.2025 16:28:08
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.
CVE-2025-28256
- EPSS 2.1%
- Veröffentlicht 28.03.2025 00:00:00
- Zuletzt bearbeitet 14.04.2025 17:06:52
An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.
CVE-2024-36650
- EPSS 0.3%
- Veröffentlicht 11.06.2024 16:15:29
- Zuletzt bearbeitet 04.06.2025 17:24:49
TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to ...