Totolink

Nr1800x

18 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2026-82616

Exploit
  • EPSS 0.61%
  • Veröffentlicht 31.08.2026 04:45:11
  • Zuletzt bearbeitet 01.09.2026 19:17:28

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be execu...

7.4

CVE-2026-82597

Exploit
  • EPSS 1.13%
  • Veröffentlicht 31.08.2026 00:15:09
  • Zuletzt bearbeitet 31.08.2026 20:56:08

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The ...

10

CVE-2026-15701

Exploit
  • EPSS 0.79%
  • Veröffentlicht 14.07.2026 16:30:10
  • Zuletzt bearbeitet 15.07.2026 16:16:44

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overf...

8.8

CVE-2026-7548

Exploit
  • EPSS 1.49%
  • Veröffentlicht 01.05.2026 02:30:14
  • Zuletzt bearbeitet 01.05.2026 15:26:24

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection. The attack is possible to b...

9.8

CVE-2026-7546

Exploit
  • EPSS 0.75%
  • Veröffentlicht 01.05.2026 02:15:12
  • Zuletzt bearbeitet 01.05.2026 15:26:24

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulation of the argument Host leads to stack-based buffer overflow. The attack...

9.8

CVE-2026-5030

Exploit
  • EPSS 2.28%
  • Veröffentlicht 29.03.2026 03:30:15
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument host_time leads to command in...

8.8

CVE-2026-1328

Exploit
  • EPSS 0.77%
  • Veröffentlicht 22.01.2026 14:32:13
  • Zuletzt bearbeitet 29.01.2026 17:47:56

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer ove...

8.8

CVE-2026-1327

Exploit
  • EPSS 2.65%
  • Veröffentlicht 22.01.2026 14:02:10
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Such manipulation of the argument command l...

8.8

CVE-2026-1326

Exploit
  • EPSS 3.21%
  • Veröffentlicht 22.01.2026 13:32:08
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument Hostname causes comm...

6.5

CVE-2025-60688

Exploit
  • EPSS 0.51%
  • Veröffentlicht 13.11.2025 00:00:00
  • Zuletzt bearbeitet 05.07.2026 02:17:12

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function). The binary reads the "IpAddress" parameter fr...