Security Vulnerabilities - CVEs Published In 2022
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter.
CVSS Score
7.8
EPSS Score
0.003
Published
2022-08-25
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.
CVSS Score
7.8
EPSS Score
0.009
Published
2022-08-25
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVSS Score
7.8
EPSS Score
0.012
Published
2022-08-25
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.
CVSS Score
7.8
EPSS Score
0.003
Published
2022-08-25
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.
CVSS Score
7.8
EPSS Score
0.01
Published
2022-08-25
TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.
CVSS Score
7.8
EPSS Score
0.01
Published
2022-08-25
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-25
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-25
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS Score
9.8
EPSS Score
0.108
Published
2022-08-25
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-25