Browse CVEs

HIGH 8.8 CVE-2025-9780 A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQoS. This m… A702r Firmware No fix yet Fix from $1,9502025-09-01 HIGH 7.0 CVE-2025-9577 A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the… X2000r Firmware No fix yet Fix from $1,9502025-08-28 CRITICAL 9.8 CVE-2025-9533EPSS 9% A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulati… T10 Firmware Mitigation only Fix from $2,3002025-08-27 CRITICAL 9.8 CVE-2025-9303 A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cs… A720r Firmware Mitigation only Fix from $2,3002025-08-21 CRITICAL 9.8 CVE-2025-55591EPSS 7% TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoi… A3002r Firmware Mitigation only Fix from $2,3002025-08-18 HIGH 7.5 CVE-2025-55588 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw. This vulnerability al… A3002r Firmware No fix yet Fix from $1,9502025-08-18 MEDIUM 6.5 CVE-2025-55589 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff … A3002r Firmware No fix yet Fix from $1,6002025-08-18 MEDIUM 6.5 CVE-2025-55590 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html. A3002r Firmware No fix yet Fix from $1,6002025-08-18 HIGH 7.5 CVE-2025-55586 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter. This vulnerability allo… A3002r Firmware No fix yet Fix from $1,9502025-08-18 HIGH 7.5 CVE-2025-55587 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice. This vulnera… A3002r Firmware No fix yet Fix from $1,9502025-08-18 MEDIUM 6.5 CVE-2025-55585 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function. A3002r Firmware No fix yet Fix from $1,6002025-08-18 MEDIUM 5.3 CVE-2025-55584 TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account. A3002r Firmware No fix yet Fix from $1,6002025-08-18 HIGH 8.8 CVE-2025-8937 A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipul… N350r Firmware Mitigation only Fix from $1,9502025-08-14 MEDIUM 6.3 CVE-2025-8938 A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the compone… N350r Firmware No fix yet Fix from $1,6002025-08-14 CRITICAL 9.8 CVE-2025-51451 In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm. Ex1200t Firmware Mitigation only Fix from $2,3002025-08-13 CRITICAL 9.8 CVE-2025-51452 In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm. A7000r Firmware Mitigation only Fix from $2,3002025-08-13 CRITICAL 9.8 CVE-2025-51390 TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig func… N600r Firmware Mitigation only Fix from $2,3002025-08-04 MEDIUM 6.5 CVE-2025-52284 Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This … X6000r Firmware No fix yet Fix from $1,6002025-07-29 HIGH 7.5 CVE-2025-8246 A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality o… X15 Firmware No fix yet Fix from $1,9502025-07-27 HIGH 7.5 CVE-2025-8245 A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functi… X15 Firmware No fix yet Fix from $1,9502025-07-27 CRITICAL 9.8 CVE-2025-8244 A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boaf… X15 Firmware Mitigation only Fix from $2,3002025-07-27 HIGH 7.5 CVE-2025-8243 A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /bo… X15 Firmware No fix yet Fix from $1,9502025-07-27 HIGH 7.5 CVE-2025-8242 A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /… X15 Firmware No fix yet Fix from $1,9502025-07-27 HIGH 7.2 CVE-2025-8181 A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.co… N600r Firmware No fix yet Fix from $1,9502025-07-26 HIGH 8.8 CVE-2025-8170 A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the fi… T6 Firmware No fix yet Fix from $1,9502025-07-25 HIGH 8.8 CVE-2025-8139 A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafr… A702r Firmware No fix yet Fix from $1,9502025-07-25 HIGH 8.8 CVE-2025-8140EPSS 7% A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the fi… A702r Firmware No fix yet Fix from $1,9502025-07-25 HIGH 8.8 CVE-2025-8137 A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functi… A702r Firmware No fix yet Fix from $1,9502025-07-25 HIGH 8.8 CVE-2025-8138EPSS 7% A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of … A702r Firmware No fix yet Fix from $1,9502025-07-25 HIGH 7.5 CVE-2025-8136 A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boa… A702r Firmware No fix yet Fix from $1,9502025-07-25