Browse CVEs

MEDIUM 6.5 CVE-2025-44845 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime param… Ca600 Poe Firmware No fix yet Fix from $1,6002025-05-01 MEDIUM 6.3 CVE-2025-44846 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl paramet… Ca600 Poe Firmware No fix yet Fix from $1,6002025-05-01 MEDIUM 6.3 CVE-2025-44836 TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour o… Cp900 Firmware No fix yet Fix from $1,6002025-05-01 MEDIUM 6.3 CVE-2025-44837 TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via … Cp900 Firmware No fix yet Fix from $1,6002025-05-01 MEDIUM 6.3 CVE-2025-44838 TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileNam… Cp900 Firmware No fix yet Fix from $1,6002025-05-01 MEDIUM 6.3 CVE-2025-44854 TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter… Cp900 Firmware No fix yet Fix from $1,6002025-05-01 HIGH 8.8 CVE-2025-3993 A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boaf… N150rt Firmware No fix yet Fix from $1,9502025-04-28 HIGH 8.8 CVE-2025-3992 A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /bo… N150rt Firmware No fix yet Fix from $1,9502025-04-28 HIGH 8.8 CVE-2025-3991 A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/for… N150rt Firmware No fix yet Fix from $1,9502025-04-28 HIGH 8.8 CVE-2025-3990 A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown function… N150rt Firmware No fix yet Fix from $1,9502025-04-27 HIGH 8.8 CVE-2025-3989 A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of th… N150rt Firmware No fix yet Fix from $1,9502025-04-27 HIGH 8.8 CVE-2025-3988 A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPor… N150rt Firmware No fix yet Fix from $1,9502025-04-27 HIGH 8.8 CVE-2025-3987EPSS 10% A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /… N150rt Firmware No fix yet Fix from $1,9502025-04-27 HIGH 7.3 CVE-2025-28020 TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. A800r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28021 TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters A810r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28022 TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. A810r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28025 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found t… A830r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28028 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found t… A830r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28018 TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter. A800r Firmware No fix yet Fix from $1,9502025-04-23 HIGH 7.3 CVE-2025-28019 TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component A800r Firmware No fix yet Fix from $1,9502025-04-23 MEDIUM 6.5 CVE-2025-28017 TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter. A800r Firmware No fix yet Fix from $1,6002025-04-23 CRITICAL 9.8 CVE-2025-28035 TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through th… A830r Firmware No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-28036 TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through t… A950rg Firmware No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-28038 TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through… Ex1200t Firmware No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-28039 TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through … Ex1200t Firmware No fix yet Fix from $2,3002025-04-22 HIGH 7.3 CVE-2025-28029 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found t… A830r Firmware No fix yet Fix from $1,9502025-04-22 HIGH 7.3 CVE-2025-28026 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found t… A830r Firmware No fix yet Fix from $1,9502025-04-22 HIGH 7.3 CVE-2025-28027 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to… A830r Firmware No fix yet Fix from $1,9502025-04-22 CRITICAL 9.8 CVE-2025-28037 TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in … A810r Firmware No fix yet Fix from $2,3002025-04-22 HIGH 8.8 CVE-2025-28030 TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules functi… A810r Firmware No fix yet Fix from $1,9502025-04-22