shinypolaris/vuln-reports

Releases0

Bugs🐞&Reports

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-46976 ↗	Oct 31, 2023Tuesday, 31 October 2023, 14:15	9.8 CRITICAL	—
TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.
CVE-2023-46977 ↗	Oct 31, 2023Tuesday, 31 October 2023, 14:15	9.8 CRITICAL	—
TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
CVE-2023-46978 ↗	Oct 31, 2023Tuesday, 31 October 2023, 14:15	7.5 HIGH	—
TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.
CVE-2023-46979 ↗	Oct 31, 2023Tuesday, 31 October 2023, 14:15	9.8 CRITICAL	—
TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.