Nr1800x Firmware vulnerabilities
17 known vulnerabilities in Nr1800x Firmware from TOTOLINK. 17 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
NR1800X: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument host_time leads to command injection. T
- 8.8 High severity
NR1800X: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The
- 8.8 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Such manipulation of the argument command leads to co
- 8.8 High severity
NR1800X: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument Hostname causes command inject
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.
- 9.8 Critical severity
NR1800X: Stack-based Buffer Overflow
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to stack-based buffer overflow. T
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function.
- 9.8 Critical severity
Nr1800x Firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function.
- 8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function.
- 9.8 Critical severity
Nr1800x Firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.