Vuldb Updates

A vulnerability identified as critical has been detected in TOTOLINK T8 4.1.5cu. The impacted element is the function recvSlaveCloudCheckStatus of the component MQTT Packet Handler. This manipulation of the argument ip causes command injection. This vulnerability is tracked as CVE-2023-24151. The attack is only possible within the local network. No exploit exists.

A vulnerability labeled as critical has been found in TOTOLINK T8 4.1.5cu. This affects the function meshSlaveUpdate of the component MQTT Packet Handler. Such manipulation of the argument serverIp leads to command injection. This vulnerability is listed as CVE-2023-24152. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. This affects an unknown function. This manipulation causes hard-coded credentials. The identification of this vulnerability is CVE-2023-24149. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as critical, was found in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setUploadUserData. Executing manipulation of the argument FileName can lead to command injection. This vulnerability appears as CVE-2023-24148. The attacker needs to be present on the local network. There is no available exploit.

A vulnerability, which was classified as critical, has been found in TOTOLINK CA300-PoE 6.2c.884. Impacted is an unknown function of the file /etc/config/product.ini of the component Telnet Service. Performing manipulation results in hard-coded credentials. This vulnerability is reported as CVE-2023-24147. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Microsoft Windows up to Server 2019. This affects an unknown part of the component Data Sharing Service. The manipulation results in improper access controls. This vulnerability is cataloged as CVE-2019-0572. The attack may be launched remotely. Furthermore, there is an exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability labeled as critical has been found in Microsoft Windows up to Server 2019. This issue affects some unknown processing of the component Data Sharing Service. Such manipulation leads to improper access controls. This vulnerability is documented as CVE-2019-0574. The attack can be executed remotely. Additionally, an exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Microsoft Windows 10 1809/10 1903/Server 1903/Server 2019 and classified as critical. This vulnerability affects unknown code of the component NTFS. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2019-1170. The attack may be launched remotely. Furthermore, there is an exploit available. It is best practice to apply a patch to resolve this issue.

A vulnerability identified as critical has been detected in Microsoft Windows up to Server 2019. This vulnerability affects unknown code of the component Data Sharing Service. This manipulation causes improper access controls. This vulnerability is registered as CVE-2019-0573. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in Microsoft Windows up to Server 2019. It has been declared as critical. The affected element is an unknown function of the component Data Sharing Service. Such manipulation leads to improper access controls. This vulnerability is referenced as CVE-2019-0571. It is possible to launch the attack remotely. Furthermore, an exploit is available. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Microsoft Windows. It has been declared as critical. This vulnerability affects unknown code of the component COM Desktop Broker. The manipulation results in improper access controls. This vulnerability is identified as CVE-2019-0552. The attack can be executed remotely. Additionally, an exploit exists. Applying a patch is advised to resolve this issue.

A vulnerability marked as critical has been reported in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function setNetworkDiag. The manipulation of the argument NetDiagPingSize leads to command injection. This vulnerability is listed as CVE-2023-24142. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability described as critical has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setNetworkDiag. The manipulation of the argument NetDiagTracertHop results in command injection. This vulnerability is cataloged as CVE-2023-24143. The attack must originate from the local network. There is no exploit available.

A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This vulnerability affects the function setRebootScheCfg. This manipulation of the argument hour causes command injection. This vulnerability is registered as CVE-2023-24144. The attack requires access to the local network. No exploit is available.

A vulnerability classified as critical was found in TOTOLINK CA300-PoE 6.2c.884. This issue affects the function setRebootScheCfg. Such manipulation of the argument minute leads to command injection. This vulnerability is documented as CVE-2023-24146. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected by this issue is the function setUnloadUserData. Performing manipulation of the argument plugin_version results in command injection. This vulnerability is known as CVE-2023-24145. Access to the local network is required for this attack. No exploit is available.

A vulnerability labeled as critical has been found in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setNetworkDiag. Executing manipulation of the argument NetDiagPingTimeOut can lead to command injection. This vulnerability is tracked as CVE-2023-24141. The attack is only possible within the local network. No exploit exists.

A vulnerability described as critical has been identified in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setNetworkDiag. Such manipulation of the argument NetDiagPingNum leads to command injection. This vulnerability is documented as CVE-2023-24140. The attack requires being on the local network. There is not any exploit available.

A vulnerability identified as critical has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setNetworkDiag. Performing manipulation of the argument NetDiagHost results in command injection. This vulnerability is identified as CVE-2023-24139. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability categorized as critical has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function NTPSyncWithHost. Such manipulation of the argument host_time leads to command injection. This vulnerability is referenced as CVE-2023-24138. The attack needs to be initiated within the local network. No exploit is available.