GCVE - cpe:2.3:h:totolink:cp300\+:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:cp300\+:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Cp300+ (`7117b431-f107-5cde-a794-ef2f178cc040`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-36782`	vulnerable	2026-06-08 06:39:45.654944	Details available TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Published: 2024-06-03T20:09:40.333Z Updated: 2025-02-13T15:59:38.336Z Open on db.gcve.eu Reference links https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20cp300/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36955`	not_vulnerable	2026-06-08 06:08:14.743017	Details available TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule. Published: 2023-10-16T00:00:00.000Z Updated: 2024-09-16T18:43:22.994Z Open on db.gcve.eu Reference links https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36954`	not_vulnerable	2026-06-08 06:08:14.740854	Details available TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Published: 2023-10-16T00:00:00.000Z Updated: 2024-09-16T18:47:18.499Z Open on db.gcve.eu Reference links https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36954`	vulnerable	2026-06-08 06:08:14.740649	Details available TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Published: 2023-10-16T00:00:00.000Z Updated: 2024-09-16T18:47:18.499Z Open on db.gcve.eu Reference links https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36953`	not_vulnerable	2026-06-08 06:08:14.740345	Details available TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Published: 2023-10-16T00:00:00.000Z Updated: 2024-09-16T18:49:19.419Z Open on db.gcve.eu Reference links https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36952`	not_vulnerable	2026-06-08 06:08:14.739877	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34669`	not_vulnerable	2026-06-08 06:06:25.876715	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34669`	vulnerable	2026-06-08 06:06:25.875332	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31856`	not_vulnerable	2026-06-08 06:04:43.554521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.