Totolink Cp450 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Totolink Cp450 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2024-34204 — CVSS 9.8 (critical): TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function…
• CVE-2024-7332 — CVSS 9.8 (critical): A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the…
• CVE-2024-34213 — CVSS 9.8 (critical): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.
• CVE-2024-34209 — CVSS 9.8 (critical): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.
• CVE-2024-34200 — CVSS 8.8 (high): TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.
• CVE-2024-34207 — CVSS 8.8 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function.
• CVE-2024-34211 — CVSS 8.8 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows…
• CVE-2024-7465 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK CP450 4.1.0cu.747_B20191224. Affected is the function loginauth of…
• CVE-2024-34219 — CVSS 8.6 (high): TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log…
• CVE-2024-34217 — CVSS 7.7 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode…
• CVE-2024-34201 — CVSS 7.3 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.
• CVE-2024-34212 — CVSS 7.3 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.
• CVE-2024-34215 — CVSS 7.3 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.
• CVE-2024-34210 — CVSS 7.3 (high): TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate…
• CVE-2024-34205 — CVSS 7.3 (high): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function.
• CVE-2024-34202 — CVSS 6.5 (medium): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.
• CVE-2024-34206 — CVSS 6.5 (medium): TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function…
• CVE-2024-34218 — CVSS 3.8 (low): TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost…
• CVE-2024-34203 — CVSS 3.8 (low): TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function.