Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA3100r Firmware4.1.2cu.5247 b20211129

21 matches found

CVE
CVE•added 2025/03/28 9:15 p.m.•70 views

CVE-2025-28256

An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_modules/wireless.so.

9.8CVSS8.1AI score0.03036EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•64 views

CVE-2022-29640

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.8CVSS7.5AI score0.00386EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•63 views

CVE-2022-29638

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.8CVSS7.5AI score0.00386EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•63 views

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /web_cste/cgi-bin/product.ini.

10CVSS9.5AI score0.00373EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•59 views

CVE-2022-29639

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.

9.3CVSS8.4AI score0.02322EPSS
CVE
CVE•added 2025/04/22 2:15 p.m.•55 views

CVE-2025-28034

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost funct...

9.8CVSS7.6AI score0.03659EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•54 views

CVE-2022-29646

An access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 allows attackers to obtain sensitive information via a crafted web request.

5.3CVSS4.9AI score0.00195EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•53 views

CVE-2022-29643

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.8CVSS7.5AI score0.00386EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•53 views

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample.

10CVSS9.5AI score0.00373EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•52 views

CVE-2022-29642

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.8CVSS7.5AI score0.00386EPSS
CVE
CVE•added 2022/05/18 12:15 p.m.•51 views

CVE-2022-29641

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.8CVSS7.5AI score0.00386EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•50 views

CVE-2025-28025

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.

7.3CVSS7.2AI score0.00145EPSS
CVE
CVE•added 2025/04/22 2:15 p.m.•48 views

CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm par...

7.3CVSS7.5AI score0.00261EPSS
CVE
CVE•added 2025/04/22 2:15 p.m.•48 views

CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through ...

7.3CVSS7.6AI score0.00145EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•46 views

CVE-2025-28028

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.

7.3CVSS7.3AI score0.00145EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•43 views

CVE-2025-28029

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi

7.3CVSS7.8AI score0.00145EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•42 views

CVE-2025-28026

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.

7.3CVSS7.8AI score0.00145EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•42 views

CVE-2025-28036

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

9.8CVSS7.6AI score0.03659EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•39 views

CVE-2025-28027

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.

7.3CVSS7.8AI score0.00145EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•39 views

CVE-2025-28035

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

9.8CVSS7.6AI score0.03659EPSS
CVE
CVE•added 2024/06/11 4:15 p.m.•35 views

CVE-2024-36650

TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function setNoticeCfg of the file /lib/cste_modules/system.so, the length of the user input string NoticeUrl is not checked. This can lead to a buffer overflow, allowing attackers to construct mali...

7.5CVSS6.8AI score0.00304EPSS