TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

49 records in A3002ru Firmware · all components

TI-2024-22621 CVE-2024-34198 · GHSA-4j37-x4vf-9p6c

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer…

HIGH 82

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00662 Published 2024-08-28 No fix listed CWE-120

TI-2026-21376 CVE-2026-26736 · GHSA-5jg4-px58-ghq6

TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer…

HIGH 73

TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00548 Published 2026-02-17 No fix listed CWE-121

TI-2026-21374 CVE-2026-26731 · GHSA-qvhf-98cj-8779

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer…

HIGH 73

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00517 Published 2026-02-17 No fix listed CWE-121

TI-2025-06323 CVE-2025-6953 · GHSA-83pv-rgxm-9x6f

TOTOLINK A3002RU HTTP POST Request formParentControl buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-07-01 No fix listed CWE-119

TI-2025-06309 CVE-2025-6939 · GHSA-m297-gp5c-j4g3

TOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00981 Published 2025-07-01 No fix listed CWE-119

TI-2025-05794 CVE-2025-6393 · GHSA-6xw8-jh6q-85g8

TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01046 Published 2025-06-21 No fix listed CWE-119

TI-2025-05573 CVE-2025-6163 · GHSA-hxxx-52m4-m5g9

TOTOLINK A3002RU HTTP POST Request formMultiAP buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-17 No fix listed CWE-119

TI-2025-05558 CVE-2025-6148 · GHSA-jqg3-j8h7-vw2f

TOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01036 Published 2025-06-17 No fix listed CWE-119

TI-2025-04328 CVE-2025-4833 · GHSA-gx7g-663f-fvr2

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04327 CVE-2025-4832 · GHSA-cq5p-gh3j-rmpx

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04326 CVE-2025-4831 · GHSA-5m7h-3422-q57v

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04320 CVE-2025-4825 · GHSA-4cmr-35q3-c969

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04319 CVE-2025-4824 · GHSA-3264-h8mv-qcrp

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04318 CVE-2025-4823 · GHSA-vp4m-3qw3-rfpq

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2019-14289 CVE-2019-19824 · GHSA-mrf4-89gh-pm62

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute…

HIGH 73

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.25135 Published 2020-01-27 No fix listed CWE-78

TI-2025-05738 CVE-2025-6337 · GHSA-jrvp-6f3w-jhh7

TOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow

HIGH 71

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-20 No fix listed CWE-119

TI-2019-14290 CVE-2019-19825 · GHSA-qx9v-3w62-8wqf

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an…

HIGH 65

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29557 Published 2020-01-27 No fix listed CWE-287

TI-2025-04946 CVE-2025-5506 · GHSA-vpjw-957p-r9gr

TOTOLINK A3002RU NAT Mapping Page cross site scripting

MEDIUM 63

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00392 Published 2025-06-03 No fix listed CWE-79

TI-2025-04945 CVE-2025-5505 · GHSA-23ww-hxf9-47fc

TOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting

MEDIUM 63

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00464 Published 2025-06-03 No fix listed CWE-79

TI-2025-04948 CVE-2025-5508 · GHSA-q3q3-r499-2w2w

TOTOLINK A3002RU IP Port Filtering Page cross site scripting

MEDIUM 55

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0044 Published 2025-06-03 No fix listed CWE-79

TI-2025-04947 CVE-2025-5507 · GHSA-rw7v-mvq9-wxc3

TOTOLINK A3002RU MAC Filtering Page cross site scripting

MEDIUM 55

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00392 Published 2025-06-03 No fix listed CWE-79

TI-2018-09564 CVE-2018-13316 · GHSA-p4rv-q343-3g8h

System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows…

MEDIUM 48

System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03195 Published 2018-11-27 No fix listed CWE-78

TI-2018-09562 CVE-2018-13314 · GHSA-69j5-58xf-9g4v

System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows…

MEDIUM 48

System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03195 Published 2018-11-27 No fix listed CWE-78

TI-2018-09555 CVE-2018-13307 · GHSA-g57p-jjjg-vp93

System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to…

MEDIUM 48

System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03195 Published 2018-11-27 No fix listed CWE-78

TI-2018-09554 CVE-2018-13306 · GHSA-whqg-c7jg-f4rh

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers…

MEDIUM 48

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03195 Published 2018-11-27 No fix listed CWE-78

Open these records in search →