shijin0925/IOT

Releases0

Stars5

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-28955 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	5 MEDIUM
An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.
CVE-2022-28956 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	9.8 CRITICAL	7.5 HIGH
An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.
CVE-2022-28958 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	—	—
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE-2022-29638 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	7.8 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2022-29639 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	8.1 HIGH	9.3 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.
CVE-2022-29640 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	7.8 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2022-29641 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	7.8 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2022-29642 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	7.8 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2022-29643 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	7.5 HIGH	7.8 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVE-2022-29644 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	9.8 CRITICAL	10 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.
CVE-2022-29645 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	9.8 CRITICAL	10 HIGH
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.
CVE-2022-29646 ↗	May 18, 2022Wednesday, 18 May 2022, 12:15	5.3 MEDIUM	5 MEDIUM
An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.