Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:*:*:*:*:*:*:*

part: o version: 9.1.0cu.2112_b20220316 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx1800T Firmware (b7e02cca-f1a3-5a5d-8b91-05fa77f9b17f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2097 vulnerable 2026-06-08 07:14:58.012194 TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T22:31:06.074Z
Updated: 2025-03-10T17:20:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2096 vulnerable 2026-06-08 07:14:58.011781 TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T22:00:16.475Z
Updated: 2025-03-07T22:28:45.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2095 vulnerable 2026-06-08 07:14:58.011218 TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T22:00:12.940Z
Updated: 2025-03-07T22:28:13.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2094 vulnerable 2026-06-08 07:14:58.009794 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection
MEDIUM (6.3)
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T21:31:09.611Z
Updated: 2025-03-07T22:27:35.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1852 vulnerable 2026-06-08 07:08:38.345513 Totolink EX1800T cstecgi.cgi loginAuth buffer overflow
HIGH (8.8)
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T05:31:06.795Z
Updated: 2025-03-03T17:19:05.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34257 vulnerable 2026-06-08 06:37:33.103569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12352 vulnerable 2026-06-08 06:23:51.765001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52026 vulnerable 2026-06-08 06:17:54.152862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51028 vulnerable 2026-06-08 06:16:17.205367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51027 vulnerable 2026-06-08 06:16:17.204875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51026 vulnerable 2026-06-08 06:16:17.204531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51025 vulnerable 2026-06-08 06:16:17.203871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51024 vulnerable 2026-06-08 06:16:17.203336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51023 vulnerable 2026-06-08 06:16:17.202962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51022 vulnerable 2026-06-08 06:16:17.202602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51021 vulnerable 2026-06-08 06:16:17.202204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51020 vulnerable 2026-06-08 06:16:17.201767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51019 vulnerable 2026-06-08 06:16:17.201301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51018 vulnerable 2026-06-08 06:16:17.200885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51017 vulnerable 2026-06-08 06:16:17.200332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51016 vulnerable 2026-06-08 06:16:17.199952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51015 vulnerable 2026-06-08 06:16:17.199422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51014 vulnerable 2026-06-08 06:16:17.198765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51013 vulnerable 2026-06-08 06:16:17.198364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51012 vulnerable 2026-06-08 06:16:17.197505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51011 vulnerable 2026-06-08 06:16:17.195930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.