Login Request a demo
CF
Product
Cp300 Firmware
by Totolink · last CVE Jun 3, 2024
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 6High 1Medium 0Low 0
Severity
All severities7Critical6High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cp300 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-36782
9.8
0%
Jun 3
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root
Affected: 2.0.4-b20201102
CVE-2023-36955
9.8
1%
Oct 16
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule
Affected: through 5.2cu.7594_b20200910
CVE-2023-36954
9.8
2%
Oct 16
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection
Affected: 5.2cu.7594_b20200910
CVE-2023-36953
9.8
2%
Oct 16
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection
Affected: 5.2cu.7594_b20200910
CVE-2023-36952
9.8
1%
Oct 16
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg
Affected: 5.2cu.7594_b20200910
CVE-2023-31856
9.8
3%
May 16
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands…
Affected: 5.2cu.7594_b20200910
Showing 6