Totolink

T10 V2 Firmware

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-40041

Exploit
  • EPSS 0.29%
  • Published 08.08.2023 19:15:10
  • Last modified 21.11.2024 08:18:34

TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code.

9.8

CVE-2023-40042

Exploit
  • EPSS 0.29%
  • Published 08.08.2023 19:15:10
  • Last modified 21.11.2024 08:18:35

TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code.

9.8

CVE-2021-43636

  • EPSS 0.4%
  • Published 25.03.2022 18:15:21
  • Last modified 21.11.2024 06:29:33

Two Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function when processing host data in the HTTP request process.

9.8

CVE-2022-25081

Exploit
  • EPSS 5.66%
  • Published 24.02.2022 15:15:30
  • Last modified 21.11.2024 06:51:37

TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.