Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:lr1200gb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductLr1200Gb (4a4f4f6c-9c65-52ca-8824-19d683461f7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1783 vulnerable 2026-06-08 06:27:14.496551 Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow
CRITICAL (9.8)
A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument http_host leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-02-23T00:00:10.799Z
Updated: 2024-08-12T15:59:03.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0578 vulnerable 2026-06-08 06:22:01.402457 Totolink LR1200GB cstecgi.cgi UploadCustomModule stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250794 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-16T16:00:06.865Z
Updated: 2024-08-01T18:11:35.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0577 vulnerable 2026-06-08 06:22:01.401945 Totolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow
HIGH (8.8)
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250793 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-16T15:31:04.643Z
Updated: 2025-06-02T15:11:03.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0576 vulnerable 2026-06-08 06:22:01.401329 Totolink LR1200GB cstecgi.cgi setIpPortFilterRules stack-based overflow
HIGH (8.8)
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sPort leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-16T15:31:03.567Z
Updated: 2025-06-06T20:08:24.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0575 vulnerable 2026-06-08 06:22:01.400750 Totolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflow
HIGH (8.8)
A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-16T15:00:07.449Z
Updated: 2024-09-10T18:24:14.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0574 vulnerable 2026-06-08 06:22:01.400224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0573 vulnerable 2026-06-08 06:22:01.399758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0572 vulnerable 2026-06-08 06:22:01.399190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0571 vulnerable 2026-06-08 06:22:01.398505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0295 vulnerable 2026-06-08 06:22:00.253210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0294 vulnerable 2026-06-08 06:22:00.252419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0293 vulnerable 2026-06-08 06:22:00.251911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0292 vulnerable 2026-06-08 06:22:00.251107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0291 vulnerable 2026-06-08 06:22:00.248870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.