Vulnerability index

Browse CVEs

1,082 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

A800r Firmware CRITICAL 9.8
CVE-2022-25076

TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows …

Patch available
Fix from $2,300 2022-02-24
A3100r Firmware CRITICAL 9.8
CVE-2022-25077EPSS 33%

TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows…

Patch available
Fix from $2,300 2022-02-24
A3600r Firmware CRITICAL 9.8
CVE-2022-25078

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows…

Patch available
Fix from $2,300 2022-02-24
A810r Firmware CRITICAL 9.8
CVE-2022-25079

TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows …

Patch available
Fix from $2,300 2022-02-24
A830r Firmware CRITICAL 9.8
CVE-2022-25080

TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows att…

Patch available
Fix from $2,300 2022-02-24
T10 V2 Firmware CRITICAL 9.8
CVE-2022-25081

TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attac…

Patch available
Fix from $2,300 2022-02-24
A950rg Firmware CRITICAL 9.8
CVE-2022-25082EPSS 16%

TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function.…

Patch available
Fix from $2,300 2022-02-24
A860r Firmware CRITICAL 9.8
CVE-2022-25083

TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows …

Patch available
Fix from $2,300 2022-02-24
T6 Firmware CRITICAL 9.8
CVE-2022-25084EPSS 25%

TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attack…

Patch available
Fix from $2,300 2022-02-24
T6 Firmware CRITICAL 9.8
CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25131

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B2021101…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25132

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows atta…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25133

A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows a…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25134

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attac…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25135

A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allow…

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25136

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 …

Mitigation only
Fix from $2,300 2022-02-19
T6 Firmware CRITICAL 9.8
CVE-2022-25137

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T…

Mitigation only
Fix from $2,300 2022-02-19
X5000r Firmware CRITICAL 9.8
CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerabilit…

No fix yet
Fix from $2,300 2022-02-04
X5000r Firmware CRITICAL 9.8
CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerabi…

No fix yet
Fix from $2,300 2022-02-04
A720r Firmware CRITICAL 9.8
CVE-2021-45740

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers…

No fix yet
Fix from $2,300 2022-02-04
A720r Firmware CRITICAL 9.8
CVE-2021-45742

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows a…

No fix yet
Fix from $2,300 2022-02-04
X5000r Firmware HIGH 7.5
CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attack…

No fix yet
Fix from $1,950 2022-02-04
X5000r Firmware HIGH 7.5
CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to int…

No fix yet
Fix from $1,950 2022-02-04
X5000r Firmware HIGH 7.5
CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attacke…

No fix yet
Fix from $1,950 2022-02-04
A720r Firmware HIGH 7.5
CVE-2021-45737

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to c…

No fix yet
Fix from $1,950 2022-02-04
A720r Firmware HIGH 7.5
CVE-2021-45739

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to c…

No fix yet
Fix from $1,950 2022-02-04
X5000r Firmware HIGH 7.5
CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to …

No fix yet
Fix from $1,950 2022-02-04
A720r Firmware CRITICAL 9.8
CVE-2021-44247

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command inje…

No fix yet
Fix from $2,300 2022-02-04
A720r Firmware HIGH 7.5
CVE-2021-44246

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack over…

No fix yet
Fix from $1,950 2022-02-04
Ex200 Firmware CRITICAL 9.8
CVE-2021-43711EPSS 38%

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The p…

No fix yet
Fix from $2,300 2022-01-04