Wa300 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:wa300_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Wa300 Firmware (88dfcfd6-12b6-58c8-bba1-12a0a1606f44) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7721 |
vulnerable | 2026-06-08 08:08:57.612901 |
Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection
MEDIUM (6.3)
A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument hostTime leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-05-04T02:00:17.423Z
Updated: 2026-05-04T17:50:11.917Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7720 |
vulnerable | 2026-06-08 08:08:57.612624 |
Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection
MEDIUM (6.3)
A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument langType causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2026-05-04T01:45:14.135Z
Updated: 2026-05-04T12:55:27.383Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7719 |
vulnerable | 2026-06-08 08:08:57.612335 |
Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow
CRITICAL (9.8)
A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument http_host results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-04T01:30:16.375Z
Updated: 2026-05-05T18:57:04.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7718 |
vulnerable | 2026-06-08 08:08:57.611939 |
Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection
MEDIUM (6.3)
A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument webWlanIdx leads to command injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2026-05-04T01:15:17.037Z
Updated: 2026-05-05T00:53:15.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7717 |
vulnerable | 2026-06-08 08:08:57.611459 |
Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow
HIGH (8.8)
A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-04T01:00:23.203Z
Updated: 2026-05-04T11:33:35.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4497 |
vulnerable | 2026-06-08 08:05:13.442696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2167 |
vulnerable | 2026-06-08 07:55:16.657267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0641 |
vulnerable | 2026-06-08 07:47:12.833034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.