CVE-2025-28135

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28135: Stack-based Buffer Overflow

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28135

The TOTOLINK A810R wireless dual-band router (specifically version 4.1.2cu.5182_B20201026 ) is susceptible to a stack-based buffer overflow vulnerability in the downloadFile.cgi script. The root cause is the script's failure to properly validate the length and size of input data. An attacker expl...

CVE-2025-28135

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

The vulnerability of the downloadFile.cgi function in the microprogramming software for the Totolink-A810R router allows a hacker to execute arbitrary code.

The vulnerability of the downloadFile.cgi function in the Totolink-A810R router microprogramming system is related to the lack of measures taken to neutralize special elements operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...

CVE-2024-57036

TOTOLINK A810R V4.1.2cu.5032B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request...

CVE-2024-57036: Improper Neutralization of Special Elements used in a Command

TOTOLINK A810R V4.1.2cu.5032B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request...

TOTOLINK A810R 安全漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a buffer overflow vulnerability that originates from downloadFlile.cgi failing to properly validate the length and size of input data, which can be exploited by an attacker to...

VulnCheck KEV: CVE-2022-38511

TOTOLINK A810R V5.9c.4050B20190424 was discovered to contain a command injection vulnerability via the component downloadFile.cgi...

Command injection

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

CVE-2022-40475: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

PT-2022-25398 · Totolink · Totolink A860R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A860R version 4.1.2cu.5182 B20201027 Description: The issue is related to a command injection via the component "/cgi-bin/downloadFile.cgi". This allows for potential malicious commands to be executed. Recommendations: For TOTOLINK...

TOTOLINK A860R 操作系统命令注入漏洞

TOTOLINK A860R is a wireless router from China Gion Electronics TOTOLINK.TOTOLINK A860R version V4.1.2cu.5182B20201027 is vulnerable to command injection, which stems from the component /cgi-bin/downloadFile.cgi failing to properly filter the construct command special characters, commands, etc. A...

TOTOLINK A860R downloadfile.cgi Buffer Overflow Vulnerability

TOTOLINK A860R is a dual-band wireless router with a maximum transmission rate of 1200Mbps, 6-antenna dual-band concurrent technology, and support for remote management by mobile APP, which is suitable for small and medium-sized enterprises and home network environments. TOTOLINK A860R suffers fr...

CVE-2022-37840

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...

CVE-2022-37840

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...

Buffer overflow

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...

CVE-2022-37840

CVE-2022-37840 affects TOTOLINK A860R (4.1.2cu.5182_B20201027). The vulnerability is in the main function of downloadfile.cgi, described as a buffer overflow. Coordinated disclosures across multiple sources (NVD/NVD-derived entries, Red Hat advisory, CNVD, PRION, PT Security) consistently identif...

CVE-2022-37840

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...

CVE-2022-37840: Buffer Copy without Checking Size of Input

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...