GCVE - cpe:2.3:o:totolink:cp450_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:cp450_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Cp450 Firmware (`1cd12d30-876e-5575-b5e2-b3ace28fdaf7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-11554`	vulnerable	2026-07-29 00:23:31.413025	TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation MEDIUM (4.3) A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least privilege violation. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Published: 2026-06-08T17:30:11.745Z Updated: 2026-06-09T12:33:55.771Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/369164 https://vuldb.com/vuln/369164/cti https://vuldb.com/cve/CVE-2026-11554 https://vuldb.com/submit/834821 https://www.notion.so/TOTOLink-CP450-V4-1-0cu-747-3671f5ba989080c3b39ac3984d2ff44d?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34211`	vulnerable	2026-06-08 06:37:33.059477	Details available TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Published: 2024-05-09T14:20:14.043Z Updated: 2025-02-13T15:53:10.319Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP450/HardCodeRoot	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34207`	vulnerable	2026-06-08 06:37:33.053182	Details available TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function. Published: 2024-05-09T16:27:45.809Z Updated: 2025-02-13T15:53:08.737Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP450/setStaticDhcpConfig	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34206`	vulnerable	2026-06-08 06:37:33.052683	Details available TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. Published: 2024-05-09T16:29:41.793Z Updated: 2025-02-13T15:53:08.214Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34204`	vulnerable	2026-06-08 06:37:33.051552	Details available TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. Published: 2024-05-09T16:33:40.378Z Updated: 2025-02-13T15:53:06.911Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP450/setUpgradeFW	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34203`	vulnerable	2026-06-08 06:37:33.050929	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.