Browse CVEs

MEDIUM 6.5 CVE-2025-28031 TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini. A810r Firmware No fix yet Fix from $1,6002025-04-22 CRITICAL 9.8 CVE-2025-28024 TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi A810r Firmware No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-28034 TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5… A800r Firmware No fix yet Fix from $2,3002025-04-22 HIGH 7.3 CVE-2025-28032 TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5… A800r Firmware No fix yet Fix from $1,9502025-04-22 HIGH 7.3 CVE-2025-28033 TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5… A800r Firmware No fix yet Fix from $1,9502025-04-22 CRITICAL 9.8 CVE-2025-29209 TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of cstecgi .… X18 Firmware No fix yet Fix from $2,3002025-04-18 MEDIUM 5.3 CVE-2025-3675 A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServ… A3700r Firmware No fix yet Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-3674 A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function … A3700r Firmware No fix yet Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-3668 A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setSche… A3700r Firmware No fix yet Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-3667 A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the f… A3700r Firmware No fix yet Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-3666 A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of t… A3700r Firmware No fix yet Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-3665 A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function se… A3700r Firmware No fix yet Fix from $1,6002025-04-16 HIGH 8.2 CVE-2025-3663EPSS 10% A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEa… A3700r Firmware No fix yet Fix from $1,9502025-04-16 MEDIUM 5.3 CVE-2025-3664 A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg o… A3700r Firmware No fix yet Fix from $1,6002025-04-16 CRITICAL 9.8 CVE-2025-22900 Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function. N600r Firmware No fix yet Fix from $2,3002025-04-15 CRITICAL 9.8 CVE-2025-28137EPSS 14% The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function throu… A810r Firmware No fix yet Fix from $2,3002025-04-15 MEDIUM 6.5 CVE-2025-28136 TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi. A800r Firmware Mitigation only Fix from $1,6002025-04-15 CRITICAL 9.8 CVE-2025-3249 A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel… A6000r Firmware No fix yet Fix from $2,3002025-04-04 CRITICAL 9.8 CVE-2025-29064 An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cstecgi.cgi. X18 Firmware Mitigation only Fix from $2,3002025-04-03 MEDIUM 5.3 CVE-2025-2955 A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file… A3000ru Firmware after 5.9c.5185 Fix from $1,6002025-03-30 CRITICAL 9.8 CVE-2025-25579EPSS 10% TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr. A3002r Firmware No fix yet Fix from $2,3002025-03-28 CRITICAL 9.8 CVE-2025-28256 An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_mo… A3100r Firmware No fix yet Fix from $2,3002025-03-28 CRITICAL 9.8 CVE-2025-28138 The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function throu… A800r Firmware No fix yet Fix from $2,3002025-03-27 HIGH 7.5 CVE-2025-28135 TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi. A810r Firmware No fix yet Fix from $1,9502025-03-27 CRITICAL 9.8 CVE-2025-2370 A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the f… Ex1800t Firmware after 9.1.0cu.2112_b20220316 Fix from $2,3002025-03-17 CRITICAL 9.8 CVE-2025-2369 A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordC… Ex1800t Firmware after 9.1.0cu.2112_b20220316 Fix from $2,3002025-03-17 CRITICAL 9.8 CVE-2025-2097EPSS 7% A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptW… Ex1800t Firmware No fix yet Fix from $2,3002025-03-07 CRITICAL 9.8 CVE-2025-2095 A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cg… Ex1800t Firmware No fix yet Fix from $2,3002025-03-07 CRITICAL 9.8 CVE-2025-2096 A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg… Ex1800t Firmware No fix yet Fix from $2,3002025-03-07 CRITICAL 9.8 CVE-2025-2094EPSS 13% A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiEx… Ex1800t Firmware No fix yet Fix from $2,3002025-03-07