CVE-2025-28028

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter...

CVE-2025-28021

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters...

The vulnerability of the setRebootScheCfg function in the microprogrammed routing software of TOTOLINK CA300-PoE allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setRebootScheCfg function in TOTOLINK CA300-PoE router microprogramming systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality,...

CVE-2025-28017

CVE-2025-28017 affects TOTOLINK A800R, version 4.1.2cu.5032_B20200408, with a Command Injection vulnerability in downloadFile.cgi exploitable via QUERY_STRING. Root cause per sources: failure to properly filter constructed command characters in that parameter. Impacts include potential remote com...

CVE-2025-28025

CVE-2025-28025 describes a buffer overflow in TOTOLINK downloadFile.cgi via the v14 parameter affecting A830R (4.1.2cu.5182_B20201102), A950RG (4.1.2cu.5161_B20200903), A3000RU (5.9c.5185_B20201128), and A3100R (4.1.2cu.5247_B20211129). Documents indicate the vulnerability exists in the downloadF...

CVE-2025-28020

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

CVE-2025-28022

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

PT-2025-17653 · Totolink · Totolink A810R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A810R version 4.1.2cu.5182 B20201026 Description: A buffer overflow issue was discovered in the downloadFile.cgi, specifically through the v14 and v3 parameters. Recommendations: For TOTOLINK A810R version 4.1.2cu.5182 B20201026, as ...

TOTOLINK A830R 安全漏洞

TOTOLINK A830R is a wireless dual-band router from China Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A830R that originates from a buffer overflow in the v14 parameter in downloadFile.cgi...

TOTOLINK A800R 安全漏洞

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A800R version V4.1.2cu.5137B20200730, which stems from the v25 parameter in downloadFile.cgi failing to correctly validate the length size of the input data, and can be...

TOTOLINK A800R 安全漏洞

The TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A800R version V4.1.2cu.5137B20200730, which stems from the v14 parameter in downloadFile.cgi failing to properly validate the length and size of the input data, and c...

CVE-2025-28018

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...

CVE-2025-28022

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

PT-2025-17646 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5032 B20200408 Description: The issue concerns a Command Injection vulnerability in the downloadFile.cgi file via the QUERY STRING parameter. This allows for potential exploitation. There is a high risk of...

PT-2025-17647 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi endpoint through the v14 parameter. This issue allows for potential exploitation. No information is provided about th...

TOTOLINK A810R 安全漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a buffer overflow vulnerability, which stems from the failure of the v14 and v3 parameters in downloadFile.cgi to properly validate the length and size of the input data, whic...

PT-2025-17654 · Totolink · Totolink A950Rg +3

Name of the Vulnerable Software and Affected Versions: TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129 Description: A buffer overflow issue was discovered in th...

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...

CVE-2025-28019

CVE-2025-28019 affects TOTOLINK A800R router (version 4.1.2cu.5137_B20200730). A buffer overflow in the downloadFile.cgi component is documented across CNVD/CNNVD/CVELIST entries, enabling potential remote code execution or denial of service as described in vendor/coverage notes. Connected source...