A6000r Firmware vulnerabilities
7 known vulnerabilities in A6000r Firmware from TOTOLINK. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
A6000R: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The att
- 8.0 High severity
A6000r Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
- 8.8 High severity
a6000r_firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.
- 9.8 Critical severity
a6000r_firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.
- 8.0 High severity
a6000r_firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
- 9.8 Critical severity
a6000r_firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.
- 8.8 High severity
a6000r_firmware: Improper Neutralization of Special Elements used in an OS Command
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function.