VendorsTOTOLINKcp300%5C%2B_firmwareall versions
Vulnerabilities

TOTOLINK CP300+ Firmware

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

6CVEs
CVE-2023-31856
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
Published 2023-05-16 · Modified
9.8EPSS 0.029
CVE-2023-36954
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
Published 2023-10-16 · Modified
9.8EPSS 0.020
CVE-2023-36953
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
Published 2023-10-16 · Modified
9.8EPSS 0.018
CVE-2023-36952
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
Published 2023-10-16 · Modified
9.8EPSS 0.008
CVE-2023-36955
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
Published 2023-10-16 · Modified
9.8EPSS 0.008
CVE-2023-34669
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
Published 2023-07-17 · Modified
7.5EPSS 0.008