Browse CVEs

CRITICAL 9.8 CVE-2022-25076 TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows … A800r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25077EPSS 33% TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows… A3100r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25078 TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows… A3600r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25079 TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows … A810r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25080 TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows att… A830r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25081 TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attac… T10 V2 Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25082EPSS 16% TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function.… A950rg Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25083 TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows … A860r Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25084EPSS 25% TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attack… T6 Firmware Patch available Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2022-25130 A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25131 A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B2021101… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25132 A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows atta… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25133 A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows a… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25134 A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attac… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25135 A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allow… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25136 A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 … T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2022-25137 A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T… T6 Firmware Mitigation only Fix from $2,3002022-02-19 CRITICAL 9.8 CVE-2021-45733 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerabilit… X5000r Firmware No fix yet Fix from $2,3002022-02-04 CRITICAL 9.8 CVE-2021-45738 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerabi… X5000r Firmware No fix yet Fix from $2,3002022-02-04 CRITICAL 9.8 CVE-2021-45740 TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers… A720r Firmware No fix yet Fix from $2,3002022-02-04 CRITICAL 9.8 CVE-2021-45742 TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows a… A720r Firmware No fix yet Fix from $2,3002022-02-04 HIGH 7.5 CVE-2021-45734 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attack… X5000r Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2021-45735 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to int… X5000r Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2021-45736 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attacke… X5000r Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2021-45737 TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to c… A720r Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2021-45739 TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to c… A720r Firmware No fix yet Fix from $1,9502022-02-04 HIGH 7.5 CVE-2021-45741 TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to … X5000r Firmware No fix yet Fix from $1,9502022-02-04 CRITICAL 9.8 CVE-2021-44247 Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command inje… A720r Firmware No fix yet Fix from $2,3002022-02-04 HIGH 7.5 CVE-2021-44246 Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack over… A720r Firmware No fix yet Fix from $1,9502022-02-04 CRITICAL 9.8 CVE-2021-43711EPSS 38% The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The p… Ex200 Firmware No fix yet Fix from $2,3002022-01-04