<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 15:15:48 +0000</lastBuildDate>
    <item>
      <title>cnvd-2024-07858</title>
      <link>https://vulnerability.circl.lu/vuln/cnvd-2024-07858</link>
      <description>cnvd-2024-07858</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cnvd-2024-07858</guid>
    </item>
    <item>
      <title>fkie_cve-2023-51017</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2023-51017</link>
      <description>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2023-51017</guid>
    </item>
    <item>
      <title>GHSA-xx2v-j2rm-5c42</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-xx2v-j2rm-5c42</link>
      <description>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-xx2v-j2rm-5c42</guid>
    </item>
    <item>
      <title>gsd-2023-51017</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2023-51017</link>
      <description>gsd-2023-51017</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2023-51017</guid>
    </item>
    <item>
      <title>VAR-202312-0768</title>
      <link>https://vulnerability.circl.lu/vuln/var-202312-0768</link>
      <description>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi. TOTOLINK of ex1800t There are unspecified vulnerabilities in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK EX1800T is a Wi-Fi range extender from China&amp;#39;s Zeon Electronics (TOTOLINK) company. 
&#13;
&#13;
There is a command execution vulnerability in the TOTOLINK EX1800T lanIp parameter. This vulnerability stems from the failure of the lanIp parameter of the setLanConfig interface of cstecgi.cgi to correctly filter special characters, commands, etc. in the constructed command. An attacker could exploit this vulnerability to execute arbitrary commands on the system&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi. TOTOLINK of ex1800t There are unspecified vulnerabilities in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. TOTOLINK EX1800T is a Wi-Fi range extender from China&amp;#39;s Zeon Electronics (TOTOLINK) company. 
&#13;
&#13;
There is a command execution vulnerability in the TOTOLINK EX1800T lanIp parameter. This vulnerability stems from the failure of the lanIp parameter of the setLanConfig interface of cstecgi.cgi to correctly filter special characters, commands, etc. in the constructed command. An attacker could exploit this vulnerability to execute arbitrary commands on the system&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/var-202312-0768</guid>
    </item>
  </channel>
</rss>
