VendorsTOTOLINKcp450any version
Vulnerabilities

TOTOLINK CP45 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

19CVEs
CVE-2024-7332
TOTOLINK CP450 Telnet Service product.ini hard-coded password
Published 2024-08-01 · Analyzed
10.0EPSS 0.207
CVE-2024-34204
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.
Published 2024-05-09 · Analyzed
9.8EPSS 0.019
CVE-2024-7465
TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow
Published 2024-08-05 · Analyzed
9.8EPSS 0.013
CVE-2024-34213
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.
Published 2024-05-09 · Analyzed
9.8EPSS 0.009
CVE-2024-34209
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.
Published 2024-05-09 · Analyzed
9.8EPSS 0.009
CVE-2024-34200
TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.
Published 2024-05-09 · Analyzed
8.8EPSS 0.009
CVE-2024-34207
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function.
Published 2024-05-09 · Analyzed
8.8EPSS 0.008
CVE-2024-34211
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
Published 2024-05-09 · Analyzed
8.8EPSS 0.005
CVE-2024-34219
TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.
Published 2024-05-09 · Analyzed
8.6EPSS 0.208
CVE-2024-34217
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function.
Published 2024-05-09 · Analyzed
7.7EPSS 0.006
CVE-2024-34210
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.
Published 2024-05-09 · Analyzed
7.3EPSS 0.012
CVE-2024-34205
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function.
Published 2024-05-09 · Analyzed
7.3EPSS 0.012
CVE-2024-34212
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.
Published 2024-05-09 · Analyzed
7.3EPSS 0.006
CVE-2024-34215
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.
Published 2024-05-09 · Analyzed
7.3EPSS 0.006
CVE-2024-34201
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.
Published 2024-05-09 · Analyzed
7.3EPSS 0.006
CVE-2024-34206
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.
Published 2024-05-09 · Analyzed
6.5EPSS 0.013
CVE-2024-34202
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.
Published 2024-05-09 · Analyzed
6.5EPSS 0.007
CVE-2024-34218
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.
Published 2024-05-09 · Analyzed
3.8EPSS 0.176
CVE-2024-34203
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function.
Published 2024-05-09 · Analyzed
3.8EPSS 0.006