TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

13 records in A6000r Firmware · all components

TI-2024-27580 CVE-2024-41318 · GHSA-ccff-2f27-4w8g

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 82

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02429 Published 2024-07-22 No fix listed CWE-77

TI-2024-27578 CVE-2024-41316 · GHSA-p742-rf2c-hvf6

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 82

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02469 Published 2024-07-22 No fix listed CWE-77

TI-2024-27581 CVE-2024-41319 · GHSA-h7vj-g26f-rq58

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 76

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05153 Published 2024-07-23 No fix listed CWE-77

TI-2024-27582 CVE-2024-41320 · GHSA-rghf-m847-v399

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 73

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02243 Published 2024-07-22 No fix listed CWE-77

TI-2024-25089 CVE-2024-37626 · GHSA-68f4-m7ww-959w

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a…

HIGH 73

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01499 Published 2024-06-20 No fix listed CWE-78

TI-2024-37820 CVE-2024-57211 · GHSA-92r5-r4ww-c543

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 70

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01277 Published 2025-01-10 No fix listed CWE-77

TI-2024-27579 CVE-2024-41317 · GHSA-vq4q-wfv6-qgq8

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 70

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02293 Published 2024-07-22 No fix listed CWE-78

TI-2024-27577 CVE-2024-41315 · GHSA-634r-qhgm-h5w5

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 65

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.02118 Published 2024-07-22 No fix listed CWE-78

TI-2024-27576 CVE-2024-41314 · GHSA-j6w5-3xwm-qv7j

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

HIGH 65

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.02083 Published 2024-07-22 No fix listed CWE-78

TI-2024-37823 CVE-2024-57214 · GHSA-r79f-v7w7-jv39

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

MEDIUM 61

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00718 Published 2025-01-10 No fix listed CWE-77

TI-2024-37822 CVE-2024-57213 · GHSA-vqg8-4hg9-xrq5

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

MEDIUM 61

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00718 Published 2025-01-10 No fix listed CWE-77

TI-2024-37821 CVE-2024-57212 · GHSA-6g2w-ww3w-xh3x

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection…

MEDIUM 58

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00762 Published 2025-01-10 No fix listed CWE-77

TI-2025-02846 CVE-2025-3249 · GHSA-37hr-3fmf-v449

TOTOLINK A6000R mtkwifi.lua apcli_cancel_wps command injection

MEDIUM 57

A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02817 Published 2025-04-04 No fix listed CWE-74

Open these records in search →