Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6268_b20220504:*:*:*:*:*:*:*

part: o version: 9.1.0u.6268_b20220504 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA7000R Firmware (ecc35aef-7fb0-535d-bce0-41aebd726a15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7213 vulnerable 2026-06-08 06:58:21.532936 TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268_B20220504. Affected is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272784. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-30T02:31:04.063Z
Updated: 2024-08-01T21:52:31.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7212 vulnerable 2026-06-08 06:58:21.530171 TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268_B20220504. This issue affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272783. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-30T01:31:04.510Z
Updated: 2024-08-01T21:52:31.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.