Wa300 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:wa300_firmware:5.2cu.7112_b20190227:*:*:*:*:*:*:*
part: o version: 5.2cu.7112_b20190227 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Wa300 Firmware (88dfcfd6-12b6-58c8-bba1-12a0a1606f44) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4497 |
vulnerable | 2026-06-08 08:05:13.443782 |
Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection
HIGH (7.3)
A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-20T19:02:12.950Z
Updated: 2026-03-20T21:23:40.061Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2167 |
vulnerable | 2026-06-08 07:55:16.658072 |
Totolink WA300 cstecgi.cgi setAPNetwork os command injection
MEDIUM (6.3)
A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used.
Published: 2026-02-08T17:02:10.041Z
Updated: 2026-02-23T09:45:27.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0641 |
vulnerable | 2026-06-08 07:47:12.833606 |
TOTOLINK WA300 cstecgi.cgi sub_401510 command injection
MEDIUM (6.3)
A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-01-06T19:02:07.258Z
Updated: 2026-02-23T08:21:20.676Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.