Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
19 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.7) | 1.3% | — | Totolink Cp450 Firmware | 5/8/2024 | 17/6/2026 | A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to… | |
| Analizada | Crítica (9.3) | 21% | — | Totolink Cp450 Firmware | 1/8/2024 | 17/6/2026 | A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The… | |
| Analizada | Alta (8.6) | 21% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet. | |
| Analizada | Baja (3.8) | 18% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. | |
| Analizada | Alta (7.7) | 0.63% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function. | |
| Analizada | Alta (7.3) | 0.55% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function. | |
| Analizada | Crítica (9.8) | 0.94% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function. | |
| Analizada | Alta (7.3) | 0.55% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function. | |
| Analizada | Alta (8.8) | 0.55% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. | |
| Analizada | Alta (7.3) | 1.2% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter. | |
| Analizada | Crítica (9.8) | 0.94% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function. | |
| Analizada | Alta (8.8) | 0.79% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function. | |
| Analizada | Media (6.5) | 1.3% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. | |
| Analizada | Alta (7.3) | 1.2% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function. | |
| Analizada | Crítica (9.8) | 1.9% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. | |
| Analizada | Baja (3.8) | 0.59% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function. | |
| Analizada | Media (6.5) | 0.68% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function. | |
| Analizada | Alta (7.3) | 0.55% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function. | |
| Analizada | Alta (8.8) | 0.91% | — | Totolink Cp450 Firmware | 14/5/2024 | 17/6/2026 | TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function. |