Cp450 Firmware vulnerabilities
6 known vulnerabilities in Cp450 Firmware from TOTOLINK. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
CP450: Buffer Copy without Checking Size of Input
A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. It is possible to la
- 9.8 Critical severity
CP450: Use of Hard-coded Credentials
A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password.
- 8.6 High severity
cp450_firmware: Use of Hard-coded Credentials
TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.
- 8.8 High severity
cp450_firmware: Use of Hard-coded Password
TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
- 7.3 High severity
outdoor_cpe_cp450: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.
- 9.8 Critical severity
cp450_firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.