TOTOLINK CP300+ Firmware 5.2cu.7594_B20200910
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:cp300\+_firmware:5.2cu.7594_b20200910:*:*:*:*:*:*:*
part: o version: 5.2cu.7594_b20200910 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Cp300+ Firmware (f6648928-9f28-50a8-a1cc-c0262440221a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-36955 |
vulnerable | 2026-06-08 06:08:14.741143 |
Details available
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.
Published: 2023-10-16T00:00:00.000Z
Updated: 2024-09-16T18:43:22.994Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36954 |
vulnerable | 2026-06-08 06:08:14.740835 |
Details available
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
Published: 2023-10-16T00:00:00.000Z
Updated: 2024-09-16T18:47:18.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36953 |
vulnerable | 2026-06-08 06:08:14.740272 |
Details available
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
Published: 2023-10-16T00:00:00.000Z
Updated: 2024-09-16T18:49:19.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36952 |
vulnerable | 2026-06-08 06:08:14.738780 |
Details available
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
Published: 2023-10-16T00:00:00.000Z
Updated: 2024-09-16T18:51:49.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31856 |
vulnerable | 2026-06-08 06:04:43.553628 |
Details available
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
Published: 2023-05-16T00:00:00.000Z
Updated: 2025-01-23T16:01:51.524Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.