Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
TotolinkA720r Firmware

23 matches found

CVE
CVE•added 2022/03/31 12:15 a.m.•80 views

CVE-2021-43662

totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.

6.5CVSS6.5AI score0.00084EPSS
CVE
CVE•added 2021/04/14 6:15 p.m.•67 views

CVE-2021-27710

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system func...

10CVSS9.9AI score0.2015EPSS
CVE
CVE•added 2025/05/05 8:15 a.m.•61 views

CVE-2025-4270

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Config Handler. The manipulation of the argument topicurl with the input getInitCfg/getSysStatusCfg leads to information ...

7.5CVSS6.6AI score0.00156EPSS
CVE
CVE•added 2021/08/05 9:15 p.m.•57 views

CVE-2021-35325

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).

7.5CVSS7.5AI score0.03131EPSS
CVE
CVE•added 2021/08/05 9:15 p.m.•57 views

CVE-2021-35327

A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request.

9.8CVSS9.2AI score0.00443EPSS
CVE
CVE•added 2021/08/05 9:15 p.m.•56 views

CVE-2021-35326

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP request.

7.5CVSS7.4AI score0.04092EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•54 views

CVE-2021-44247

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter.

9.8CVSS10AI score0.27117EPSS
CVE
CVE•added 2021/08/05 9:15 p.m.•53 views

CVE-2021-35324

A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication.

9.8CVSS9.3AI score0.00756EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•53 views

CVE-2021-44246

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter.

7.8CVSS7.7AI score0.00386EPSS
CVE
CVE•added 2024/09/15 11:15 a.m.•49 views

CVE-2024-8869

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. T...

8.1CVSS6AI score0.0044EPSS
CVE
CVE•added 2023/02/17 10:15 p.m.•48 views

CVE-2023-23064

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

9.8CVSS9.3AI score0.00105EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•47 views

CVE-2021-45740

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin parameter.

9.8CVSS9.5AI score0.00528EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•46 views

CVE-2021-45737

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host parameter.

7.8CVSS7.6AI score0.00386EPSS
CVE
CVE•added 2022/09/15 6:15 p.m.•45 views

CVE-2022-38534

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.

7.2CVSS7.4AI score0.01901EPSS
CVE
CVE•added 2025/05/05 7:15 a.m.•45 views

CVE-2025-4268

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated remot...

6.9CVSS5.5AI score0.00339EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•44 views

CVE-2021-45739

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag parameter.

7.8CVSS7.6AI score0.00386EPSS
CVE
CVE•added 2022/02/04 2:15 a.m.•44 views

CVE-2021-45742

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

10CVSS9.9AI score0.20865EPSS
CVE
CVE•added 2025/05/05 8:15 a.m.•44 views

CVE-2025-4271

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to information disclosure. The attack ...

6.9CVSS6.8AI score0.0009EPSS
CVE
CVE•added 2025/05/05 7:15 a.m.•42 views

CVE-2025-4269

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog lea...

6.9CVSS7AI score0.00166EPSS
CVE
CVE•added 2021/04/14 4:15 p.m.•39 views

CVE-2021-27708

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system func...

10CVSS9.9AI score0.2015EPSS
CVE
CVE•added 2022/08/29 12:15 a.m.•38 views

CVE-2022-36610

TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

7.8CVSS7.7AI score0.00041EPSS
CVE
CVE•added 2022/08/25 2:15 p.m.•36 views

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.

7.8CVSS7.8AI score0.00242EPSS
CVE
CVE•added 2022/09/15 6:15 p.m.•35 views

CVE-2022-38535

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.

7.2CVSS7.4AI score0.01901EPSS