CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm paramet...

PT-2025-17542 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK...

CVE-2025-28029

This CVE affects TOTOLINK devices: A830R (v4.1.2cu.5182_B20201102), A950RG (v4.1.2cu.5161_B20200903), A3000RU (v5.9c.5185_B20201128), and A3100R (v4.1.2cu.5247_B20211129). A buffer overflow was found in the cstecgi.cgi component. From the accompanying data, the impact is listed as low for confide...

TOTOLINK多款产品 安全漏洞

TOTOLINK A3000RU and others are products of China-based TOTOLINK Electronics TOTOLINK.TOTOLINK A3000RU is a wireless router.TOTOLINK A950RG is an Ultra-Generation Giga wireless router.TOTOLINK A830R is a wireless dual-band router. A security vulnerability exists in several TOTOLINK products, whic...

CVE-2025-28029

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi...

TOTOLINK多款产品 安全漏洞

TOTOLINK A3000RU and others are products of China-based TOTOLINK Electronics TOTOLINK.TOTOLINK A3000RU is a wireless router.TOTOLINK A950RG is an Ultra-Generation Giga wireless router.TOTOLINK A830R is a wireless dual-band router. A security vulnerability exists in several TOTOLINK products, whic...

CVE-2025-28033

TOTOLINK A800R, A810R, A830R, A950RG, A3000RU, and A3100R are affected by a pre-auth buffer overflow in the setNoticeCfg function via the IpTo parameter. Affected firmware versions are: A800R 4.1.2cu.5137_B20200730; A810R 4.1.2cu.5182_B20201026; A830R 4.1.2cu.5182_B20201102; A950RG 4.1.2cu.5161_B...

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary...

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary...

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary...

The vulnerability of the CGI handler formWlEncrypt in the microprogramming software of TOTOLINK AC1200 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the CGI handler formWlEncrypt in the microprogramming software of TOTOLINK AC1200 routers is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...

CVE-2024-28639

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service DoS via the IP field...

VulnCheck KEV: CVE-2019-19825

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an "topicurl":"setting/getSanvas" POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can...

The vulnerability of the Tunnel function in the 6th parameter (relay6rd) of the microprogrammable software for TOTOLINK X5000R and A7000R routers allows a hacker to execute arbitrary code.

The vulnerability of the Tunnel function in the 6th parameter of the microprogramming software for TOTOLINK X5000R and A7000R routers lies in the ability to execute commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

New Go-based Botnet Exploiting Exploiting Dozens of IoT Vulnerabilities to Expand its Network

NOTE: In this blog, Zerobot refers to a botnet that spreads primarily through IoT and web application vulnerabilities. It is not associated with the chatbot ZeroBot.ai. A novel Go-based botnet called Zerobot has been observed in the wild proliferating by taking advantage of nearly two dozen...

The vulnerability of the `setUpgradeFW` function in TOTOLINK router microprogramming devices, such as TOTOLINK A800R, TOTOLINK A810R, TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R, allows a hacker to execute arbitrary commands.

The vulnerability of the setUpgradeFW function parameter FileName in the microprogramming software for TOTOLINK A800R, TOTOLINK A810R, TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers is related to the lack of measures for cleaning input data. Exploiting this...

CVE-2022-28935

Totolink A830R V5.9c.4729B20191112, Totolink A3100R V4.1.2cu.5050B20200504, Totolink A950RG V4.1.2cu.5161B20200903, Totolink A800R V4.1.2cu.5137B20200730, Totolink A3000RU V5.9c.5185B20201128, Totolink A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability...

CVE-2022-28935

Totolink A830R V5.9c.4729B20191112, Totolink A3100R V4.1.2cu.5050B20200504, Totolink A950RG V4.1.2cu.5161B20200903, Totolink A800R V4.1.2cu.5137B20200730, Totolink A3000RU V5.9c.5185B20201128, Totolink A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability...

多款TOTOLINK产品命令注入漏洞

TOTOLINK A3100R and others are products of China Gion Electronics TOTOLINK.TOTOLINK A3100R is a series of wireless router.TOTOLINK A800R is a wireless router.TOTOLINK A950RG is a super generation Giga wireless router. TOTOLINK A830R V5.9c.4729B20191112 version, Totolink A3100R...

VulnCheck KEV: CVE-2022-26210

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the...