TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

32 records in A702r Firmware · all components

TI-2025-08972 CVE-2025-9783 · GHSA-xj6h-q5c9-g8r3

TOTOLINK A702R formParentControl sub_418030 buffer overflow

HIGH 73

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00697 Published 2025-09-01 No fix listed CWE-119

TI-2025-07446 CVE-2025-8140 · GHSA-4g9q-w72v-3543

TOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.11281 Published 2025-07-25 No fix listed CWE-119

TI-2025-06310 CVE-2025-6940 · GHSA-53q3-762m-2wvx

TOTOLINK A702R HTTP POST Request formParentControl buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00985 Published 2025-07-01 No fix listed CWE-119

TI-2025-06199 CVE-2025-6825 · GHSA-h9x4-6j6x-7vjx

TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01018 Published 2025-06-28 No fix listed CWE-119

TI-2025-05794 CVE-2025-6393 · GHSA-6xw8-jh6q-85g8

TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01046 Published 2025-06-21 No fix listed CWE-119

TI-2025-05557 CVE-2025-6147 · GHSA-9p68-f4mh-g9jj

TOTOLINK A702R HTTP POST Request formSysLog buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-17 No fix listed CWE-119

TI-2025-04328 CVE-2025-4833 · GHSA-gx7g-663f-fvr2

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04327 CVE-2025-4832 · GHSA-cq5p-gh3j-rmpx

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04326 CVE-2025-4831 · GHSA-5m7h-3422-q57v

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-05-17 No fix listed CWE-119

TI-2025-04320 CVE-2025-4825 · GHSA-4cmr-35q3-c969

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04319 CVE-2025-4824 · GHSA-3264-h8mv-qcrp

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2025-04318 CVE-2025-4823 · GHSA-vp4m-3qw3-rfpq

TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formReflashClientTbl submit-url buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00849 Published 2025-05-17 No fix listed CWE-119

TI-2019-14289 CVE-2019-19824 · GHSA-mrf4-89gh-pm62

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute…

HIGH 73

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.25135 Published 2020-01-27 No fix listed CWE-78

TI-2025-07445 CVE-2025-8139 · GHSA-862h-mghm-42j7

TOTOLINK A702R HTTP POST Request formPortFw buffer overflow

HIGH 71

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01232 Published 2025-07-25 No fix listed CWE-119

TI-2025-07444 CVE-2025-8138 · GHSA-rf6f-2cp5-q8fj

TOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflow

HIGH 71

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.11281 Published 2025-07-25 No fix listed CWE-119

TI-2025-07443 CVE-2025-8137 · GHSA-hc8w-46gq-hrcx

TOTOLINK A702R HTTP POST Request formIpQoS buffer overflow

HIGH 71

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01232 Published 2025-07-25 No fix listed CWE-119

TI-2025-07442 CVE-2025-8136 · GHSA-q75j-74j8-wcx3

TOTOLINK A702R HTTP POST Request formFilter buffer overflow

HIGH 71

A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01233 Published 2025-07-25 No fix listed CWE-119

TI-2025-06019 CVE-2025-6627 · GHSA-p76p-cppc-v4xr

TOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflow

HIGH 71

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.05801 Published 2025-06-25 No fix listed CWE-119

TI-2019-14290 CVE-2019-19825 · GHSA-qx9v-3w62-8wqf

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an…

HIGH 65

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29557 Published 2020-01-27 No fix listed CWE-287

TI-2019-14287 CVE-2019-19822 · GHSA-552g-mhvj-f64v

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…

MEDIUM 44

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08669 Published 2020-01-27 No fix listed CWE-306

TI-2019-14288 CVE-2019-19823 · GHSA-vj2g-8grq-fccw

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa…

MEDIUM 42

A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06411 Published 2020-01-27 No fix listed CWE-522

TI-2025-08971 CVE-2025-9782 · GHSA-4q2m-5774-92fh

TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow

MEDIUM 41

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00697 Published 2025-09-01 No fix listed CWE-119

TI-2025-08970 CVE-2025-9781 · GHSA-hrwv-wp54-9562

TOTOLINK A702R formFilter sub_4162DC buffer overflow

MEDIUM 41

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00697 Published 2025-09-01 No fix listed CWE-119

TI-2025-08969 CVE-2025-9780 · GHSA-774v-32p5-pm2r

TOTOLINK A702R formIpQoS sub_419BE0 buffer overflow

MEDIUM 41

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00697 Published 2025-09-01 No fix listed CWE-119

TI-2025-08968 CVE-2025-9779 · GHSA-ph9m-5932-3v52

TOTOLINK A702R formFilter sub_4162DC buffer overflow

MEDIUM 41

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00697 Published 2025-09-01 No fix listed CWE-119

Open these records in search →

Critical	616
High	434
Medium	263
Low	9
No CVSS	0