TOTOLINK T8 Firmware 4.1.5cu.861_B20230220
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:t8_firmware:4.1.5cu.861_b20230220:*:*:*:*:*:*:*
part: o version: 4.1.5cu.861_b20230220 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | T8 Firmware (a35007b5-33c7-523e-a9a8-d5cb9bc64d91) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8580 |
vulnerable | 2026-06-08 07:00:24.981840 |
TOTOLINK AC1200 T8 shadow.sample hard-coded password
HIGH (8.1)
A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T20:31:06.358Z
Updated: 2024-09-09T13:44:21.783Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8579 |
vulnerable | 2026-06-08 07:00:24.980935 |
TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T19:31:05.769Z
Updated: 2024-09-09T13:45:29.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8578 |
vulnerable | 2026-06-08 07:00:24.980164 |
TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this issue is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument device_name leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T19:00:05.992Z
Updated: 2024-09-09T13:46:40.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8577 |
vulnerable | 2026-06-08 07:00:24.979457 |
TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T18:31:05.815Z
Updated: 2024-09-10T14:59:09.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8576 |
vulnerable | 2026-06-08 07:00:24.978480 |
TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T18:00:06.899Z
Updated: 2024-09-10T14:57:56.170Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8575 |
vulnerable | 2026-06-08 07:00:24.977513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8574 |
vulnerable | 2026-06-08 07:00:24.976802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8573 |
vulnerable | 2026-06-08 07:00:24.975788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46451 |
vulnerable | 2026-06-08 06:48:10.079399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46424 |
vulnerable | 2026-06-08 06:48:10.063138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46419 |
vulnerable | 2026-06-08 06:48:10.061184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.