Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
70 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.6% | — | Totolink X5000r Firmware | 13/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setDmzCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.7% | — | Totolink X5000r Firmware | 13/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Analizada | Alta (7.8) | 1.6% | — | Totolink X5000r Firmware | 13/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in addBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Analizada | Alta (8.8) | 1.7% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.1% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWanIeCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Analizada | Alta (8.8) | 1.7% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.6% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.6% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setSyslogCfg . Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.6% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUrlFilterRules. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Modificada | Alta (8.8) | 1.2% | — | Totolink X5000r Firmware | 12/8/2024 | 17/6/2026 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setL2tpServerCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. | |
| Analizada | Alta (8) | 1.8% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function. | |
| Analizada | Media (6) | 1.0% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. | |
| Analizada | Crítica (9.8) | 2.1% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. | |
| Analizada | Alta (8.8) | 2.2% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary. | |
| Analizada | Alta (8.8) | 2.2% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mru" parameter in the "cstecgi.cgi" binary. | |
| Analizada | Alta (8.8) | 2.2% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary. | |
| Analizada | Media (6) | 0.94% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary. | |
| Analizada | Alta (8.8) | 9.2% | — | Totolink X5000r Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function. | |
| Analizada | Alta (7.5) | 14% | — | Totolink X5000r FirmwareTotolink A7000r Firmware | 16/3/2024 | 17/6/2026 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field. | |
| Modificada | Crítica (9.8) | 1.2% | — | Totolink X5000r FirmwareTotolink A7000r Firmware | 16/3/2024 | 17/6/2026 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field. | |
| Modificada | Alta (7.5) | 0.93% | — | Totolink X5000r Firmware | 17/2/2024 | 17/6/2026 | An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_time parameter of the NTPSyncWithHost component. | |
| Modificada | Crítica (9.8) | 31% | — | Totolink X5000r Firmware | 8/12/2023 | 17/6/2026 | A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B20230112. It has been rated as critical. This issue affects the function… | |
| Modificada | Alta (7.5) | 0.72% | — | Totolink X5000r FirmwareTotolink A7000r Firmware | 16/10/2023 | 17/6/2026 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |
| Modificada | Crítica (9.8) | 0.70% | — | Totolink X5000r FirmwareTotolink A7000r Firmware | 16/10/2023 | 17/6/2026 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. | |
| Modificada | Crítica (9.8) | 0.82% | — | Totolink X5000r FirmwareTotolink A7000r Firmware | 16/10/2023 | 17/6/2026 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. |