totolink Vulnerability Advisory Catalog

Total 1,106 security vulnerabilities recorded for totolink software and firmware.

← Back to All Vendors
Component: a3300r_firmware

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the c...

📅 2025-10-27
CVSS 8.8 Dossier →
Component: a3300r_firmware

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of t...

📅 2025-10-27
CVSS 8.8 Dossier →
Component: a3300r_firmware

A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi...

📅 2025-10-27
CVSS 8.8 Dossier →
Component: a3300r_firmware

A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi...

📅 2025-10-27
CVSS 8.8 Dossier →
Component: n600r_firmware

A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) vi...

📅 2025-10-22
CVSS 7.5 Dossier →
Component: n600r_firmware

A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a cr...

📅 2025-10-22
CVSS 7.5 Dossier →
Component: n600r_firmware

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulne...

📅 2025-10-22
CVSS 7.5 Dossier →
Component: n600r_firmware

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This...

📅 2025-10-22
CVSS 7.5 Dossier →
Component: n600r_firmware

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /c...

📅 2025-10-08
CVSS 8.8 Dossier →
CVE-2025-61045 CRITICAL
Component: x18_firmware

TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg func...

📅 2025-10-01
CVSS 9.8 Dossier →
CVE-2025-61044 CRITICAL
Component: x18_firmware

TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCf...

📅 2025-10-01
CVSS 9.8 Dossier →
CVE-2025-11005 CRITICAL
Component: x6000r_firmware

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injectio...

📅 2025-09-25
CVSS 9.8 Dossier →
Component: n600r_firmware

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service....

📅 2025-09-25
CVSS 5.3 Dossier →
Component: x6000r_firmware

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.136...

📅 2025-09-24
CVSS 8.8 Dossier →
CVE-2025-52906 CRITICAL
Component: x6000r_firmware

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injectio...

📅 2025-09-24
CVSS 9.8 Dossier →
Component: x6000r_firmware

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207....

📅 2025-09-23
CVSS 7.5 Dossier →
CVE-2025-52053 CRITICAL
Component: x6000r_firmware

TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter....

📅 2025-09-15
CVSS 9.8 Dossier →
Component: x2000r_firmware

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

📅 2025-09-12
CVSS 8.0 Dossier →
Component: n600r_firmware

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-...

📅 2025-09-04
CVSS 7.3 Dossier →
CVE-2025-9934 MEDIUM
Component: x5000r_firmware

A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. Performing...

📅 2025-09-04
CVSS 6.3 Dossier →
Component: a702r_firmware

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formParentContro...

📅 2025-09-01
CVSS 8.8 Dossier →
Component: a702r_firmware

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/formOneKeyAcc...

📅 2025-09-01
CVSS 8.8 Dossier →
Component: a702r_firmware

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manip...

📅 2025-09-01
CVSS 8.8 Dossier →
Component: a702r_firmware

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQoS. This ma...

📅 2025-09-01
CVSS 8.8 Dossier →
Page 5 of 47 (1,106 Total Records)