CA300-PoE vulnerabilities
14 known vulnerabilities in CA300-PoE from TOTOLINK. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The
- 9.1 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack ma
- 9.1 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotel
- 9.1 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated rem
- 9.9 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. Th
- 9.9 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched rem
- 9.1 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated
- 9.9 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch th
- 9.9 Critical severity
CA300-PoE: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploi
- 9.8 Critical severity
CA300-PoE: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSetting of the file ap.so. The manipulation of the argument hour/minute leads to os command injection. It is possible to initiate the attack re
- 9.8 Critical severity
CA300-PoE: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. Affected by this issue is the function setUpgradeUboot of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack may be l
- 9.8 Critical severity
CA300-PoE: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. Affected by this vulnerability is the function setUpgradeFW of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack
- 9.8 Critical severity
CA300-PoE: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function SetWLanApcliSettings of the file wps.so. The manipulation of the argument PIN leads to os command injection. It is possible to launch the att
- 8.8 High severity
CA300-PoE: Buffer Copy without Checking Size of Input
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can b