Skip to contentTotolink Cp900l Firmware vulnerabilities
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.CVE-2024-354015.9 Medium
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRulesCVE-2024-354032.7 Low
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRulesCVE-2024-354005.3 Medium
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuthCVE-2024-353998.8 High
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.CVE-2024-353989.8 Critical
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to e…CVE-2024-35397EPSS 15.1%8.8 High
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.CVE-2024-353958.8 High
- totolink cp900, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.CVE-2024-353969.8 Critical