totolink Vulnerability Advisory Catalog

Total 1,106 security vulnerabilities recorded for totolink software and firmware.

← Back to All Vendors
Component: a3300r_firmware

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi....

📅 2026-03-31
CVSS 7.3 Dossier →
CVE-2026-5105 MEDIUM
Component: a3300r_firmware

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecg...

📅 2026-03-30
CVSS 6.3 Dossier →
CVE-2026-5104 MEDIUM
Component: a3300r_firmware

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cst...

📅 2026-03-30
CVSS 6.3 Dossier →
CVE-2026-5103 MEDIUM
Component: a3300r_firmware

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi....

📅 2026-03-30
CVSS 6.3 Dossier →
CVE-2026-5102 MEDIUM
Component: a3300r_firmware

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi...

📅 2026-03-30
CVSS 6.3 Dossier →
CVE-2026-5101 MEDIUM
Component: a3300r_firmware

A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the ...

📅 2026-03-29
CVSS 6.3 Dossier →
CVE-2026-5030 MEDIUM
Component: nr1800x_firmware

A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi...

📅 2026-03-29
CVSS 6.3 Dossier →
CVE-2026-5020 MEDIUM
Component: a3600r_firmware

A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cstec...

📅 2026-03-29
CVSS 6.3 Dossier →
Component: lr350_firmware

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecg...

📅 2026-03-27
CVSS 8.8 Dossier →
Component: x6000r_firmware

A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /...

📅 2026-03-23
CVSS 7.2 Dossier →
Component: wa300_firmware

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cs...

📅 2026-03-20
CVSS 7.3 Dossier →
Component: n300rh_firmware

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi....

📅 2026-03-08
CVSS 7.3 Dossier →
CVE-2026-3301 CRITICAL
Component: n300rh_firmware

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /...

📅 2026-02-27
CVSS 9.8 Dossier →
Component: x5000r_firmware

TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENT_LENGTH environme...

📅 2026-02-24
CVSS 7.5 Dossier →
Component: x6000r_firmware

TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executab...

📅 2026-02-23
CVSS 8.8 Dossier →
CVE-2025-70327 CRITICAL
Component: x5000r_firmware

TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executab...

📅 2026-02-23
CVSS 9.8 Dossier →
Component: x5000r_firmware

TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable....

📅 2026-02-23
CVSS 8.0 Dossier →
Component: a3002ru_firmware

TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup f...

📅 2026-02-17
CVSS 8.8 Dossier →
Component: a3002ru_firmware

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formF...

📅 2026-02-17
CVSS 8.8 Dossier →
Component: a3002ru_firmware

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function...

📅 2026-02-17
CVSS 8.8 Dossier →
CVE-2026-2167 MEDIUM
Component: wa300_firmware

A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cg...

📅 2026-02-08
CVSS 6.3 Dossier →
Component: a950rg_firmware

A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not p...

📅 2026-02-03
CVSS 6.5 Dossier →
CVE-2025-67188 CRITICAL
Component: a950rg_firmware

A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_mod...

📅 2026-02-03
CVSS 9.8 Dossier →
CVE-2025-67187 CRITICAL
Component: a950rg_firmware

A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface ...

📅 2026-02-03
CVSS 9.8 Dossier →
Page 2 of 47 (1,106 Total Records)