NR1800X vulnerabilities
10 known vulnerabilities in NR1800X from TOTOLINK. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.9 Critical severity
NR1800X: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remote
- 7.4 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is
- 9.8 Critical severity
NR1800X: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The a
- 8.8 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection. The attack is possible to be carried
- 9.8 Critical severity
NR1800X: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulation of the argument Host leads to stack-based buffer overflow. The attack can be ex
- 9.8 Critical severity
NR1800X: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument host_time leads to command injection. T
- 8.8 High severity
NR1800X: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The
- 8.8 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Such manipulation of the argument command leads to co
- 8.8 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument Hostname causes command inject
- 9.8 Critical severity
NR1800X: Stack-based Buffer Overflow
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. T