L-14

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN **Description** A remote resource allocation issue exists within the bftpd component, specifically affecting the `/etc/bftpd.conf` file. The problem occurs when the `USERLIMIT GLOBAL` argument is manipulated, allowing a remote attacker to trigger the allocation of resources. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-link DIR-823G version 1.0.2B05 20181207 **Description** A weakness exists in the Web Interface component within the `/etc/boa/boa.conf` file. A remote attacker can perform a manipulation that leads to a least privilege violation. This attack is characterized by high complexity and is difficult to exploit. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK A3000RU versions prior to 20260906 TOTOLINK A3100R versions prior to 20260906 TOTOLINK A950RG versions prior to 20260906 TOTOLINK AC1200T10 versions prior to 20260906 TOTOLINK CP450 versions prior to 20260906 TOTOLINK CS185R T10 versions prior to 20260906 TOTOLINK EX200 versions prior to 20260906 **Description** A least privilege violation exists in the Web Interface component due to an issue within the `/etc/boa/boa.conf` file. This flaw allows a remote attacker to manipulate the system, although the attack complexity is high and exploitation is considered difficult. **Recommendations** Update TOTOLINK A3000RU to a version released after 20260906. Update TOTOLINK A3100R to a version released after 20260906. Update TOTOLINK A950RG to a version released after 20260906. Update TOTOLINK AC1200T10 to a version released after 20260906. Update TOTOLINK CP450 to a version released after 20260906. Update TOTOLINK CS185R T10 to a version released after 20260906. Update TOTOLINK EX200 to a version released after 20260906.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK EX200 version 4.0.3c.7646 **Description** A security flaw in the `vsftpd` component, specifically within the `/etc/vsftpd.conf` file, allows for a remote least privilege violation. This occurs when an attacker manipulates an unknown function to gain unauthorized privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-823G version 1.0.2B05 **Description** A security flaw in the vsftpd component, specifically within an unknown function of the `/etc/vsftpd.conf` file, allows for a least privilege violation. This issue can be triggered remotely through manipulation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK CP450 version 4.1.0cu.747 **Description** A least privilege violation exists in the vsftpd component, specifically within the `/etc/vsftpd.conf` file. This issue allows a remote attacker to perform manipulations that violate the principle of least privilege, which ensures that a process or user has only the minimum permissions necessary to perform its function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK AC1200 T8 version 4.1.5cu.8611 **Description** A least privilege violation exists in the vsftpd component, specifically within the `/etc/vsftpd.conf` file. This issue allows a remote attacker to compromise the system's privilege model. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC15 version 15.03.05.19 **Description** A weakness exists in the Samba component, specifically within an unknown function of the `/etc ro/smb.conf` file. This issue allows for the execution of a manipulation that results in weak password requirements. The attack is restricted to the local network and is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.