Recent CVEs
CVE-2024-36782
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
CRITICAL
CVE-2023-36954
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
UNKNOWN
Oct 16, 2023
CVE-2023-34669
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
UNKNOWN
Jul 17, 2023