Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

41 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-29392	Modificada	Crítica (9.8)	1.7%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
CVE-2022-29391	Modificada	Crítica (9.8)	1.7%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
CVE-2022-28913	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting.
CVE-2022-28912	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW.
CVE-2022-28911	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate.
CVE-2022-28910	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName.
CVE-2022-28909	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx.
CVE-2022-28908	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg.
CVE-2022-28907	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.
CVE-2022-28906	Modificada	Crítica (9.8)	2.8%	💥 PoC	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.
CVE-2022-28905	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	10/5/2022	17/6/2026	TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName.
CVE-2022-27411	Modificada	Crítica (9.8)	2.5%	—	Totolink N600r Firmware	5/5/2022	17/6/2026	TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter in the "Main" function.
CVE-2022-26189	Modificada	Crítica (9.8)	3.4%	—	Totolink N600r Firmware	22/3/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface.
CVE-2022-26188	Modificada	Crítica (9.8)	3.4%	—	Totolink N600r Firmware	22/3/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.
CVE-2022-26187	Modificada	Crítica (9.8)	20%	—	Totolink N600r Firmware	22/3/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.
CVE-2022-26186	Modificada	Crítica (9.8)	3.9%	—	Totolink N600r Firmware	22/3/2022	17/6/2026	TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi.