Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkA800r Firmware

12 matches found

CVE
CVE•added 2025/05/10 5:15 a.m.•60 views

CVE-2025-4496

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffe...

9.8CVSS7.1AI score0.00253EPSS
Web
CVE
CVE•added 2025/04/22 2:15 p.m.•56 views

CVE-2025-28034

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost funct...

9.8CVSS7.6AI score0.04667EPSS
CVE
CVE•added 2025/03/27 4:15 p.m.•55 views

CVE-2025-28138

The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

9.8CVSS9.7AI score0.04063EPSS
CVE
CVE•added 2025/04/15 2:15 p.m.•50 views

CVE-2025-28136

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.

6.5CVSS7.7AI score0.00064EPSS
CVE
CVE•added 2025/04/22 2:15 p.m.•49 views

CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm par...

7.3CVSS7.5AI score0.00337EPSS
CVE
CVE•added 2025/04/22 2:15 p.m.•49 views

CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through ...

7.3CVSS7.6AI score0.00188EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•48 views

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.

6.5CVSS7.5AI score0.09898EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•47 views

CVE-2025-28018

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.

7.3CVSS7.2AI score0.00337EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•45 views

CVE-2025-28019

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component

7.3CVSS7.5AI score0.00188EPSS
CVE
CVE•added 2025/04/23 5:16 p.m.•44 views

CVE-2025-28020

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.

7.3CVSS7.5AI score0.00188EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•43 views

CVE-2025-28036

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

9.8CVSS7.6AI score0.04667EPSS
CVE
CVE•added 2025/04/22 6:15 p.m.•40 views

CVE-2025-28035

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

9.8CVSS7.6AI score0.04667EPSS