TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

37 records in A7100ru Firmware · all components

TI-2023-16578 CVE-2023-33556 · GHSA-wq6h-jj39-jpc2

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-06-07 No fix listed CWE-77

TI-2023-14113 CVE-2023-30054 · GHSA-9457-2hhq-whx3

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.

HIGH 82

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02063 Published 2023-05-05 No fix listed CWE-78

TI-2023-14112 CVE-2023-30053 · GHSA-6r47-mjvc-vvwg

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

HIGH 82

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02063 Published 2023-05-05 No fix listed CWE-78

TI-2023-11987 CVE-2023-27232 · GHSA-cgjm-x4q6-h8hj

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-03-28 No fix listed CWE-77

TI-2023-11986 CVE-2023-27231 · GHSA-xh6m-gfx7-237c

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02023 Published 2023-03-28 No fix listed CWE-77

TI-2023-11985 CVE-2023-27229 · GHSA-6w9c-2cxm-f6q6

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02023 Published 2023-03-28 No fix listed CWE-77

TI-2023-11942 CVE-2023-27135 · GHSA-wwwp-c2xw-w45v

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02047 Published 2023-03-23 No fix listed CWE-77

TI-2023-11853 CVE-2023-26978 · GHSA-68pg-g9hg-f6c6

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-04-07 No fix listed CWE-77

TI-2023-11801 CVE-2023-26848 · GHSA-w5p4-j6p3-x252

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-04-07 No fix listed CWE-77

TI-2023-09956 CVE-2023-24276 · GHSA-45g9-v625-vr5r

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-06 No fix listed CWE-77

TI-2023-09946 CVE-2023-24238 · GHSA-h5m8-2j4h-7jj8

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-16 No fix listed CWE-77

TI-2023-09945 CVE-2023-24236 · GHSA-64q4-mmg7-55cj

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2023-02-16 No fix listed CWE-77

TI-2023-06311 CVE-2023-6906

Totolink A7100RU HTTP POST Request main buffer overflow

HIGH 82

A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0185 Published 2023-12-18 No fix listed CWE-120

TI-2022-23823 CVE-2022-48126 · GHSA-jc8x-vpwq-c9g5

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection…

HIGH 82

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.