Priority CRITICAL 85
An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.65324 · Published 2023-10-24 · No fix listed CWE-77
Priority HIGH 82
TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00663 · Published 2024-08-12 · No fix listed CWE-120
Priority HIGH 82
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2024-06-14 · No fix listed CWE-120
Priority HIGH 82
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00663 · Published 2024-06-13 · No fix listed CWE-121
Priority HIGH 82
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2024-06-13 · No fix listed CWE-121
Priority HIGH 82
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01741 · Published 2024-01-23 · No fix listed CWE-77
Priority HIGH 82
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00862 · Published 2024-01-23 · No fix listed CWE-787
Priority HIGH 82
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01544 · Published 2024-01-11 · No fix listed
Priority HIGH 82
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01544 · Published 2024-01-11 · No fix listed CWE-250
Priority HIGH 82
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01668 · Published 2024-01-11 · No fix listed CWE-78
Priority HIGH 76
TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00663 · Published 2024-08-12 · No fix listed CWE-120
Priority HIGH 76
TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00862 · Published 2024-01-23 · No fix listed CWE-787
Priority HIGH 76
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01668 · Published 2024-01-11 · No fix listed CWE-78
Priority HIGH 75
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00643 · Published 2024-06-13 · No fix listed CWE-121
Priority HIGH 73
A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00762 · Published 2026-01-19 · No fix listed CWE-119
Priority HIGH 73
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00616 · Published 2024-06-14 · No fix listed CWE-121
Priority HIGH 73
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00614 · Published 2024-06-14 · No fix listed CWE-121
Priority HIGH 73
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00615 · Published 2024-06-13 · No fix listed CWE-121
Priority HIGH 73
TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00614 · Published 2024-06-13 · No fix listed CWE-121
Priority HIGH 70
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00618 · Published 2025-04-16 · No fix listed CWE-266
Priority HIGH 70
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00592 · Published 2025-04-16 · No fix listed CWE-266
Priority HIGH 70
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01381 · Published 2025-04-16 · No fix listed CWE-266
Priority HIGH 70
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00637 · Published 2025-04-16 · No fix listed CWE-266
Priority HIGH 70
A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00637 · Published 2025-04-16 · No fix listed CWE-266
Priority HIGH 70
A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00611 · Published 2025-04-16 · No fix listed CWE-266
Load more
THREATIST.IORead the docs