Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*

part: o version: 7.4cu.2313_b20191024 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA7100Ru Firmware (1170cf6d-3c7f-5068-b5ca-499fc2ce920c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7095 vulnerable 2026-06-08 06:21:57.018855 Totolink A7100RU HTTP POST Request main buffer overflow
CRITICAL (9.8)
A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248942 is the identifier assigned to this vulnerability.
Published: 2023-12-25T00:31:04.022Z
Updated: 2024-08-02T08:50:07.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6906 vulnerable 2026-06-08 06:21:56.244205 Totolink A7100RU HTTP POST Request main buffer overflow
CRITICAL (9.8)
A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument flag with the input ie8 leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248268. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-12-18T00:00:07.209Z
Updated: 2025-05-07T20:38:58.753Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33556 vulnerable 2026-06-08 06:06:23.271561 Details available
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-01-07T14:24:42.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30054 vulnerable 2026-06-08 06:02:43.798329 Details available
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.
Published: 2023-05-05T00:00:00.000Z
Updated: 2025-01-29T17:38:25.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30053 vulnerable 2026-06-08 06:02:43.796903 Details available
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
Published: 2023-05-05T00:00:00.000Z
Updated: 2025-01-29T17:39:17.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27232 vulnerable 2026-06-08 05:57:40.732193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27231 vulnerable 2026-06-08 05:57:40.731705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27229 vulnerable 2026-06-08 05:57:40.731354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27135 vulnerable 2026-06-08 05:57:40.672550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26978 vulnerable 2026-06-08 05:57:40.502596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26848 vulnerable 2026-06-08 05:57:40.411514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25395 vulnerable 2026-06-08 05:56:08.768590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24276 vulnerable 2026-06-08 05:56:05.280555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24238 vulnerable 2026-06-08 05:56:05.260341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24236 vulnerable 2026-06-08 05:56:05.259786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24184 vulnerable 2026-06-08 05:56:05.225564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48126 vulnerable 2026-06-08 05:50:41.218625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48125 vulnerable 2026-06-08 05:50:41.218196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48124 vulnerable 2026-06-08 05:50:41.217760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48123 vulnerable 2026-06-08 05:50:41.217307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48122 vulnerable 2026-06-08 05:50:41.216624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48121 vulnerable 2026-06-08 05:50:41.215981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47853 vulnerable 2026-06-08 05:50:40.918688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46634 vulnerable 2026-06-08 05:50:39.046985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46631 vulnerable 2026-06-08 05:50:39.046412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44844 vulnerable 2026-06-08 05:50:34.995481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44843 vulnerable 2026-06-08 05:50:34.993761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28584 vulnerable 2026-06-08 05:42:44.620741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28583 vulnerable 2026-06-08 05:42:44.620352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28582 vulnerable 2026-06-08 05:42:44.620050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28581 vulnerable 2026-06-08 05:42:44.619659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28580 vulnerable 2026-06-08 05:42:44.619157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28579 vulnerable 2026-06-08 05:42:44.618854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28578 vulnerable 2026-06-08 05:42:44.618455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28577 vulnerable 2026-06-08 05:42:44.618009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28575 vulnerable 2026-06-08 05:42:44.616648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.