Am1ngl/ttt

Releases0

Stars12

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-33556 ↗	Jun 7, 2023Wednesday, 7 June 2023, 21:15	9.8 CRITICAL	—
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
CVE-2023-30054 ↗	May 5, 2023Friday, 5 May 2023, 15:15	9.8 CRITICAL	—
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.
CVE-2023-30053 ↗	May 5, 2023Friday, 5 May 2023, 15:15	9.8 CRITICAL	—
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
CVE-2023-26978 ↗	Apr 7, 2023Friday, 7 April 2023, 04:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.
CVE-2023-26848 ↗	Apr 7, 2023Friday, 7 April 2023, 03:15	9.8 CRITICAL	—
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.
CVE-2023-27232 ↗	Mar 28, 2023Tuesday, 28 March 2023, 23:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg.
CVE-2023-27231 ↗	Mar 28, 2023Tuesday, 28 March 2023, 22:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.
CVE-2023-27229 ↗	Mar 28, 2023Tuesday, 28 March 2023, 22:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.
CVE-2023-27135 ↗	Mar 23, 2023Thursday, 23 March 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.
CVE-2023-25395 ↗	Mar 8, 2023Wednesday, 8 March 2023, 14:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules.
CVE-2023-24238 ↗	Feb 16, 2023Thursday, 16 February 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules.
CVE-2023-24236 ↗	Feb 16, 2023Thursday, 16 February 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.
CVE-2023-24276 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
CVE-2022-48126 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48125 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48124 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.
CVE-2022-48123 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.
CVE-2022-48122 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.
CVE-2022-48121 ↗	Jan 20, 2023Friday, 20 January 2023, 15:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.
CVE-2022-47853 ↗	Jan 17, 2023Tuesday, 17 January 2023, 19:15	9.8 CRITICAL	—
TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.