Login Request a demo
CF
Product
Cp900l Firmware
by Totolink · last CVE May 28, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 3Medium 2Low 1
Severity
All severities8Critical2High3Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cp900l Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-35398
9.8
1%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules
Affected: 4.1.5cu.798_b20221228
CVE-2024-35396
9.8
1%
May 24
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root
Affected: 4.1.5cu.798_b20221228
CVE-2024-35399
8.8
0%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth
Affected: 4.1.5cu.798_b20221228
CVE-2024-35397
8.8
15%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter
Affected: 4.1.5cu.798_b20221228
CVE-2024-35395
8.8
0%
May 24
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root
Affected: 4.1.5cu.798_b20221228
CVE-2024-35401
5.9
1%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function
Affected: 4.1.5cu.798_b20221228
CVE-2024-35400
5.3
0%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules
Affected: 4.1.5cu.798_b20221228
CVE-2024-35403
2.7
0%
May 28
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRules
Affected: 4.1.5cu.798_b20221228
Showing 8