Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:ac1200_t8:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductAc1200 T8 (b380c234-05dd-532e-ae69-c212b50651e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11494 vulnerable 2026-07-29 00:23:31.271142 TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation
MEDIUM (4.3)
A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-06-08T06:00:12.914Z
Updated: 2026-06-09T16:06:47.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8580 vulnerable 2026-06-08 07:00:24.981731 TOTOLINK AC1200 T8 shadow.sample hard-coded password
HIGH (8.1)
A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T20:31:06.358Z
Updated: 2024-09-09T13:44:21.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8579 vulnerable 2026-06-08 07:00:24.980908 TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T19:31:05.769Z
Updated: 2024-09-09T13:45:29.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8578 vulnerable 2026-06-08 07:00:24.980135 TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this issue is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument device_name leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T19:00:05.992Z
Updated: 2024-09-09T13:46:40.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8577 vulnerable 2026-06-08 07:00:24.979405 TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-09-08T18:31:05.815Z
Updated: 2024-09-10T14:59:09.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8576 vulnerable 2026-06-08 07:00:24.978438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8575 vulnerable 2026-06-08 07:00:24.977488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8574 vulnerable 2026-06-08 07:00:24.976653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8573 vulnerable 2026-06-08 07:00:24.973840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8079 vulnerable 2026-06-08 07:00:21.438072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8078 vulnerable 2026-06-08 07:00:21.434043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8077 vulnerable 2026-06-08 07:00:21.433033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8076 vulnerable 2026-06-08 07:00:21.430263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8075 vulnerable 2026-06-08 07:00:21.425240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.