TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

25 records in A3600r Firmware · all components

TI-2026-23826 CVE-2026-31027 · GHSA-v5j6-9mr9-qwhr

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the…

HIGH 82

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2026-04-01 No fix listed CWE-120

TI-2026-01369 CVE-2026-1686 · GHSA-2xxq-pq3h-297f

Totolink A3600R app.so setAppEasyWizardConfig buffer overflow

HIGH 73

A security flaw has been discovered in Totolink A3600R 5.9c.4959.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0078 Published 2026-01-30 No fix listed CWE-119

TI-2024-06654 CVE-2024-7187 · GHSA-3f49-4398-jj66

TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01152 Published 2024-07-29 No fix listed CWE-120

TI-2024-06652 CVE-2024-7185 · GHSA-rvvm-rjf3-jr7v

TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06651 CVE-2024-7184 · GHSA-4mvm-94p9-x8vm

TOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06650 CVE-2024-7183 · GHSA-3v9v-qj74-rc8h

TOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06649 CVE-2024-7182 · GHSA-cc7h-jmr5-hg42

TOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06647 CVE-2024-7180 · GHSA-9p4c-hx77-454x

TOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06646 CVE-2024-7179 · GHSA-3c5h-r3rf-6pjg

TOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06645 CVE-2024-7178 · GHSA-chjh-xq5j-h5wr

TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06644 CVE-2024-7177 · GHSA-fvwv-5fff-6fx2

TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0118 Published 2024-07-29 No fix listed CWE-120

TI-2024-06643 CVE-2024-7176 · GHSA-9f38-68hg-mx6f

TOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2024-06641 CVE-2024-7174 · GHSA-x3j2-v37x-2v84

TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0118 Published 2024-07-29 No fix listed CWE-120

TI-2024-06640 CVE-2024-7173 · GHSA-5rh9-9jwh-jhmh

TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-28 No fix listed CWE-120

TI-2024-06639 CVE-2024-7172 · GHSA-66jr-63hj-3q99

TOTOLINK A3600R getSaveConfig buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-28 No fix listed CWE-120

TI-2024-06653 CVE-2024-7186 · GHSA-f4fh-p6rp-2w6j

TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow

HIGH 71

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-07-29 No fix listed CWE-120

TI-2026-04378 CVE-2026-5020 · GHSA-98vg-cqgx-463p

Totolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection

MEDIUM 57

A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02552 Published 2026-03-29 No fix listed CWE-74

TI-2024-06648 CVE-2024-7181 · GHSA-rp59-p734-2pfh

TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection

MEDIUM 57

A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03086 Published 2024-07-29 No fix listed CWE-77

TI-2024-06642 CVE-2024-7175 · GHSA-2mm8-pv7f-4x6g

TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection

MEDIUM 57

A vulnerability has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03086 Published 2024-07-29 No fix listed CWE-78

TI-2024-06638 CVE-2024-7171 · GHSA-8rgv-22v7-w2h4

TOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection

MEDIUM 57

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03086 Published 2024-07-28 No fix listed CWE-78

TI-2024-06626 CVE-2024-7159 · GHSA-848g-6c4v-w6p4

TOTOLINK A3600R Telnet Service product.ini hard-coded password

MEDIUM 56

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00559 Published 2024-07-28 No fix listed CWE-259

TI-2022-08827 CVE-2022-25078 · GHSA-9864-67c6-52h4

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection…

MEDIUM 47

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02771 Published 2022-02-22 No fix listed CWE-78

TI-2022-15747 CVE-2022-34993 · GHSA-x788-3f4q-pfrc

Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.

MEDIUM 44

Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01069 Published 2022-08-04 No fix listed CWE-798

TI-2022-16779 CVE-2022-36455 · GHSA-cr4w-f4ww-gf4r

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection…

LOW 36

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01009 Published 2022-08-25 No fix listed CWE-78

TI-2022-11862 CVE-2022-29377 · GHSA-xxp7-f9hw-8j74

Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in…

LOW 35

Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2022-05-24 No fix listed CWE-787

Open these records in search →

Critical	616
High	434
Medium	263
Low	9
No CVSS	0