<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-08T15:15:49.893729+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cnvd-2024-07858</id>
    <title>cnvd-2024-07858</title>
    <updated>2026-10-08T15:15:50.784598+00:00</updated>
    <content>cnvd-2024-07858</content>
    <link href="https://vulnerability.circl.lu/vuln/cnvd-2024-07858"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/fkie_cve-2023-51017</id>
    <title>fkie_cve-2023-51017</title>
    <updated>2026-10-08T15:15:50.784729+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/fkie_cve-2023-51017"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ghsa-xx2v-j2rm-5c42</id>
    <title>GHSA-xx2v-j2rm-5c42</title>
    <updated>2026-10-08T15:15:50.784819+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ghsa-xx2v-j2rm-5c42"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/gsd-2023-51017</id>
    <title>gsd-2023-51017</title>
    <updated>2026-10-08T15:15:50.784845+00:00</updated>
    <content>gsd-2023-51017</content>
    <link href="https://vulnerability.circl.lu/vuln/gsd-2023-51017"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/var-202312-0768</id>
    <title>VAR-202312-0768</title>
    <updated>2026-10-08T15:15:50.784863+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi. TOTOLINK of ex1800t There are unspecified vulnerabilities in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK EX1800T is a Wi-Fi range extender from China's Zeon Electronics (TOTOLINK) company. 


There is a command execution vulnerability in the TOTOLINK EX1800T lanIp parameter. This vulnerability stems from the failure of the lanIp parameter of the setLanConfig interface of cstecgi.cgi to correctly filter special characters, commands, etc. in the constructed command. An attacker could exploit this vulnerability to execute arbitrary commands on the system</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/var-202312-0768"/>
  </entry>
</feed>
