← Back

Totolink

totolink

1,106 CVEs • 155 products

Products (155)

Click to collapse
Toggle
X5000r Firmware
x5000r_firmware
70 CVEs
A3300r Firmware
a3300r_firmware
64 CVEs
A3002r Firmware
a3002r_firmware
61 CVEs
X6000r Firmware
x6000r_firmware
57 CVEs
A3002ru Firmware
a3002ru_firmware
49 CVEs
A3100r Firmware
a3100r_firmware
47 CVEs
X2000r Firmware
x2000r_firmware
45 CVEs
A3700r Firmware
a3700r_firmware
43 CVEs
T6 Firmware
t6_firmware
39 CVEs
N600r Firmware
n600r_firmware
38 CVEs
Ex1200t Firmware
ex1200t_firmware
37 CVEs
A7100ru Firmware
a7100ru_firmware
37 CVEs
Lr350 Firmware
lr350_firmware
36 CVEs
A7000r Firmware
a7000r_firmware
35 CVEs
A950rg Firmware
a950rg_firmware
33 CVEs
A702r Firmware
a702r_firmware
32 CVEs
A810r Firmware
a810r_firmware
29 CVEs
A720r Firmware
a720r_firmware
28 CVEs
Ex1800t Firmware
ex1800t_firmware
28 CVEs
Nr1800x Firmware
nr1800x_firmware
27 CVEs
T8 Firmware
t8_firmware
26 CVEs
A830r Firmware
a830r_firmware
25 CVEs
A3000ru Firmware
a3000ru_firmware
25 CVEs
A3600r Firmware
a3600r_firmware
25 CVEs
X15 Firmware
x15_firmware
25 CVEs
Ca300 Poe Firmware
ca300-poe_firmware
24 CVEs
A800r Firmware
a800r_firmware
23 CVEs
T10 Firmware
t10_firmware
22 CVEs
N200re Firmware
n200re_firmware
21 CVEs
N350rt Firmware
n350rt_firmware
21 CVEs
N150rt Firmware
n150rt_firmware
19 CVEs
Ex200 Firmware
ex200_firmware
19 CVEs
Lr1200gb Firmware
lr1200gb_firmware
19 CVEs
Cp450 Firmware
cp450_firmware
19 CVEs
X18 Firmware
x18_firmware
14 CVEs
Cp900 Firmware
cp900_firmware
13 CVEs
A6000r Firmware
a6000r_firmware
13 CVEs
N300rt Firmware
n300rt_firmware
11 CVEs
Ex1200l Firmware
ex1200l_firmware
11 CVEs
Ca600 Poe Firmware
ca600-poe_firmware
10 CVEs
A860r Firmware
a860r_firmware
8 CVEs
Cp900l Firmware
cp900l_firmware
8 CVEs
Cp300+ Firmware
cp300+_firmware
7 CVEs
N300rh Firmware
n300rh_firmware
7 CVEs
Ex300 V2 Firmware
ex300_v2_firmware
6 CVEs
N100re Firmware
n100re_firmware
5 CVEs
N301rt Firmware
n301rt_firmware
4 CVEs
N302r Firmware
n302r_firmware
4 CVEs
T10 V2 Firmware
t10_v2_firmware
4 CVEs
N200re V5 Firmware
n200re-v5_firmware
4 CVEs
N300rh V3 Firmware
n300rh-v3_firmware
3 CVEs
N302r Plus Firmware
n302r_plus_firmware
3 CVEs
Wa300 Firmware
wa300_firmware
3 CVEs
A850r V1 Firmware
a850r-v1_firmware
2 CVEs
F1 V2 Firmware
f1-v2_firmware
2 CVEs
F2 V1 Firmware
f2-v1_firmware
2 CVEs
N150rt V2 Firmware
n150rt-v2_firmware
2 CVEs
N151rt V2 Firmware
n151rt-v2_firmware
2 CVEs
N300rh V2 Firmware
n300rh-v2_firmware
2 CVEs
N300rt V2 Firmware
n300rt-v2_firmware
2 CVEs
A8000ru Firmware
a8000ru_firmware
2 CVEs
Lr1200 Firmware
lr1200_firmware
2 CVEs
N350r Firmware
n350r_firmware
2 CVEs
A3002ru V1 Firmware
a3002ru-v1_firmware
1 CVE
A3002ru V2 Firmware
a3002ru-v2_firmware
1 CVE
A702r V2 Firmware
a702r-v2_firmware
1 CVE
A702r V3 Firmware
a702r-v3_firmware
1 CVE
N100re V3 Firmware
n100re-v3_firmware
1 CVE
N200re V3 Firmware
n200re-v3_firmware
1 CVE
N200re V4 Firmware
n200re-v4_firmware
1 CVE
N210re Firmware
n210re_firmware
1 CVE
Ar3100r Firmware
ar3100r_firmware
1 CVE
A7000ru Firmware
a7000ru_firmware
1 CVE
A3002ru V3 Firmware
a3002ru-v3_firmware
1 CVE
A6000ub Firmware
a6000ub_firmware
1 CVE
N300rb Firmware
n300rb_firmware
1 CVE
Wa1200 Poe
wa1200-poe
1 CVE
Wa1200 Poe Firmware
wa1200-poe_firmware
1 CVE
Soho
soho
0 CVEs
A3002ru
a3002ru
0 CVEs
A702r
a702r
0 CVEs
N301rt
n301rt
0 CVEs
N302r
n302r
0 CVEs
N300rt
n300rt
0 CVEs
N200re
n200re
0 CVEs
N150rt
n150rt
0 CVEs
N100re
n100re
0 CVEs
A850r V1
a850r-v1
0 CVEs
F1 V2
f1-v2
0 CVEs
F2 V1
f2-v1
0 CVEs
N150rt V2
n150rt-v2
0 CVEs
N151rt V2
n151rt-v2
0 CVEs
N300rh V2
n300rh-v2
0 CVEs
N300rh V3
n300rh-v3
0 CVEs
N300rt V2
n300rt-v2
0 CVEs
A3002r
a3002r
0 CVEs
A3002ru V1
a3002ru-v1
0 CVEs
A3002ru V2
a3002ru-v2
0 CVEs
A702r V2
a702r-v2
0 CVEs
A702r V3
a702r-v3
0 CVEs

CVEs (1,106)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-28026
1Totolink
4A3000ru Firmware
A3100r FirmwareA830r Firmware+1 more
May 7, 2025
Apr 22, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.
CVE-2025-28037
1Totolink
2A810r Firmware
A950rg Firmware
Apr 29, 2025
Apr 22, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter.
CVE-2025-28031
1Totolink
1A810r Firmware
Apr 29, 2025
Apr 22, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.
CVE-2025-28030
1Totolink
1A810r Firmware
Apr 29, 2025
Apr 22, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.
CVE-2025-28024
1Totolink
1A810r Firmware
Apr 29, 2025
Apr 22, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi
CVE-2025-28034
1Totolink
6A3000ru Firmware
A3100r FirmwareA800r Firmware+3 more
Apr 29, 2025
Apr 22, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain...Show more
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter.Show less
CVE-2025-28033
1Totolink
6A3000ru Firmware
A3100r FirmwareA800r Firmware+3 more
Apr 29, 2025
Apr 22, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain...Show more
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.Show less
CVE-2025-28032
1Totolink
6A3000ru Firmware
A3100r FirmwareA800r Firmware+3 more
Apr 29, 2025
Apr 22, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth bu...Show more
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter.Show less
CVE-2025-29209
1Totolink
1X18 Firmware
Apr 29, 2025
Apr 18, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of cstecgi .cgi.
CVE-2025-3675
1Totolink
1A3700r Firmware
May 12, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to impro...Show more
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-3674
1Totolink
1A3700r Firmware
Apr 22, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation le...Show more
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-3668
1Totolink
1A3700r Firmware
May 12, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to imp...Show more
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-3667
1Totolink
1A3700r Firmware
May 12, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access con...Show more
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-3666
1Totolink
1A3700r Firmware
May 12, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access...Show more
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-3665
1Totolink
1A3700r Firmware
Apr 22, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads t...Show more
A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-3664
1Totolink
1A3700r Firmware
Apr 22, 2025
Apr 16, 2025
6.9 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper acc...Show more
A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-3663
1Totolink
1A3700r Firmware
May 12, 2025
Apr 16, 2025
6.9 MEDIUM· v4
8.2 HIGH· v3
5.0 MEDIUM· v2
A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the compo...Show more
A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2025-22903
1Totolink
1N600r Firmware
Apr 22, 2025
Apr 15, 2025
N/A· v4
4.6 MEDIUM· v3
N/A· v2
TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.
CVE-2025-22900
1Totolink
1N600r Firmware
Apr 22, 2025
Apr 15, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.
CVE-2025-28137
1Totolink
1A810r Firmware
Apr 29, 2025
Apr 15, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.