PT-2025-16550 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical vulnerability has been found in the TOTOLINK A3700R, affecting the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi in the Password Handler...

PT-2025-16553 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical vulnerability was found in the TOTOLINK A3700R, affecting the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access...

CVE-2025-22903

Summary: CVE-2025-22903 affects TOTOLINK N600R, version 4.3.0cu.7647_B20210106, with a stack/ buffer overflow in setWiFiWpsConfig triggered by the pin parameter. Root cause (per sources): improper validation of input length in the pin parameter leading to overflow. Documented impact: potential de...

CVE-2025-22900

Totolink N600R (v4.3.0cu.7647_B20210106) is affected by a stack overflow in the setWanConfig function when processing the macCloneMac parameter. The issue arises from insufficient validation of input length/size, enabling potential arbitrary code execution or denial of service as documented by CN...

PT-2025-16377 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: Totolink N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the macCloneMac parameter in the setWanConfig function. Recommendations: For Totolink N600R version 4.3.0cu.7647 B20210106, consider...

PT-2025-16340

Name of the Vulnerable Software and Affected Versions TOTOLINK A810R version 4.1.2cu.5182 B20201026 Description The issue concerns a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. This allows for unauthorized execution of commands...

PT-2025-16556 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A critical issue affects the setUPnPCfg function of the file /cgi-bin/cstecgi.cgi, leading to improper access controls. The manipulation can be initiated remotely. The exploit has bee...

PT-2025-16339 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version V4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi of TOTOLINK A800R. The issue allows for a potential buffer overflow. Recommendations: For TOTOLINK A800R version...

TOTOLINK N600R 安全漏洞

The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...

CVE-2025-28137

The TOTOLINK A810R V4.1.2cu.5182B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...

PT-2025-17571 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: The issue is a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter. This allows for remote command execution without prior...

PT-2025-16378 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the pin parameter in the setWiFiWpsConfig function. Recommendations: For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider disabling th...

PT-2025-18910 · Global.So +1 · Global.So +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK A950RG version 4.1.2cu.5204 B20210112 Description: The issue concerns a command execution vulnerability in the setDeviceName interface of the /lib/cste modules/global.so library. This vulnerability is specifically related to the...

The vulnerability of the recvSlaveCloudCheckStatus() function in the microprogramming software for TOTOLINK T8 allows a hacker to execute arbitrary commands.

The vulnerability of the recvSlaveCloudCheckStatus function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the `setUpgradeFW()` function in TOTOLINK T8 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setUpgradeFW function in TOTOLINK T8 router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the slaveIpList parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK X18 Code Execution Vulnerability

The TOTOLINK X18 is a gigabit router from China's Gion Electronics. A code execution vulnerability exists in the TOTOLINK X18. The vulnerability stems from sub410E54 in cstecgi.cgi and can be exploited by an attacker to execute arbitrary commands...

The vulnerability of the recvSlaveUpgstatus() function in the TOTOLINK T8 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the recvSlaveUpgstatus function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of the meshSlaveDlfw() function in the microprogramming software for TOTOLINK T8 allows a hacker to execute arbitrary commands.

The vulnerability of the meshSlaveDlfw function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the serverIp parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

The vulnerability of the meshSlaveUpdate() function in the microprogramming software for TOTOLINK T8 allows a hacker to execute arbitrary commands.

The vulnerability of the meshSlaveUpdate function in the microprogramming software for TOTOLINK T8 lies in the lack of measures taken to clean data at the control level when processing the serverIp parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A6000R Command Injection Vulnerability

The TOTOLINK A6000R is a high performance wireless router. A command injection vulnerability exists in TOTOLINK A6000R. The vulnerability stems from the mishandling of the apclicancelwps function, and no detailed vulnerability details are provided at this time...