X18 Firmware vulnerabilities
12 known vulnerabilities in X18 Firmware from TOTOLINK. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of cstecgi .cgi.
- 8.8 High severity
X18: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command inject
- 8.8 High severity
X18: Out-of-bounds Write
A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to l
- 8.8 High severity
X18: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack
- 8.8 High severity
X18: Improper Neutralization of Special Elements used in a Command
A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injecti
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
- 9.8 Critical severity
X18 Firmware: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.