TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

28 records in A720r Firmware · all components

TI-2025-08527 CVE-2025-9303 · GHSA-xr89-g3xx-9x48

TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow

HIGH 73

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00899 Published 2025-08-21 No fix listed CWE-119

TI-2025-37756 CVE-2025-60683 · GHSA-q788-r29g-853f

A command injection vulnerability exists in the ToToLink A720R Router firmware…

HIGH 70

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that handles network interface reinitialization fro…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01011 Published 2025-11-13 No fix listed CWE-77

TI-2025-37755 CVE-2025-60682 · GHSA-8mrx-w38v-p44j

A command injection vulnerability exists in the ToToLink A720R Router firmware…

HIGH 70

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud update parameters.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01453 Published 2025-11-13 No fix listed CWE-77

TI-2025-03802 CVE-2025-4271 · GHSA-4xv4-mw36-x4rv

TOTOLINK A720R cstecgi.cgi information disclosure

HIGH 70

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00665 Published 2025-05-05 No fix listed CWE-200

TI-2025-03801 CVE-2025-4270 · GHSA-4jh5-95f7-hf6w

TOTOLINK A720R Config cstecgi.cgi information disclosure

HIGH 70

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.14034 Published 2025-05-05 No fix listed CWE-200

TI-2025-03800 CVE-2025-4269 · GHSA-p9pq-9xhx-6pgq

TOTOLINK A720R Log cstecgi.cgi access control

HIGH 70

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00593 Published 2025-05-05 No fix listed CWE-266

TI-2025-03799 CVE-2025-4268 · GHSA-cfcp-527j-53hf

TOTOLINK A720R cstecgi.cgi missing authentication

HIGH 70

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01122 Published 2025-05-05 No fix listed CWE-287

TI-2025-37759 CVE-2025-60686 · GHSA-5mqq-26vj-265q

A local stack-based buffer overflow vulnerability exists in the infostat.cgi and…

MEDIUM 58

A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703…

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00238 Published 2025-11-13 No fix listed CWE-121

TI-2025-37758 CVE-2025-60685 · GHSA-273x-ghvh-vxh2

A stack buffer overflow exists in the ToToLink A720R Router firmware…

MEDIUM 58

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function).

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00238 Published 2025-11-13 No fix listed CWE-121

TI-2021-14168 CVE-2021-35324 · GHSA-rgh5-46m9-6gc9

A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware…

MEDIUM 55

A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10421 Published 2021-08-05 No fix listed

TI-2021-09138 CVE-2021-27710 · GHSA-3r94-2jfp-h3m7

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and…

MEDIUM 53

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modif…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07905 Published 2021-04-14 No fix listed CWE-78

TI-2021-09137 CVE-2021-27708 · GHSA-x4fh-cj9q-q3x6

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and…

MEDIUM 52

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0761 Published 2021-04-14 No fix listed CWE-78

TI-2023-09129 CVE-2023-23064 · GHSA-9r89-c96g-gf22

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

MEDIUM 50

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00702 Published 2023-02-17 No fix listed CWE-863

TI-2021-20821 CVE-2021-45742 · GHSA-wcmw-p6qg-rm5r

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection…

MEDIUM 48

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03069 Published 2022-02-04 No fix listed CWE-77

TI-2021-14169 CVE-2021-35325 · GHSA-h46f-g79w-66f7

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware…

MEDIUM 48

A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13313 Published 2021-08-05 No fix listed CWE-787

TI-2021-19930 CVE-2021-44247 · GHSA-784g-p98m-4mfw

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R…

MEDIUM 47

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02779 Published 2022-02-04 No fix listed CWE-77

TI-2021-20819 CVE-2021-45740 · GHSA-6c2j-x443-7jc3

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the…

MEDIUM 45

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01363 Published 2022-02-04 No fix listed

TI-2021-14171 CVE-2021-35327 · GHSA-w5cw-c968-jv2x

A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers…

MEDIUM 45

A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01384 Published 2021-08-05 No fix listed CWE-862

TI-2021-14170 CVE-2021-35326 · GHSA-ggqr-v2hp-ffj5

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows…

LOW 38

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configuration file via sending a crafted HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02535 Published 2021-08-05 No fix listed

TI-2022-18126 CVE-2022-38535 · GHSA-x8vc-m4h5-5g2g

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE)…

LOW 36

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0212 Published 2022-09-15 No fix listed CWE-78

TI-2022-18125 CVE-2022-38534 · GHSA-8c9g-vjx9-cf8f

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE)…

LOW 36

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0212 Published 2022-09-15 No fix listed CWE-78

TI-2022-16780 CVE-2022-36456 · GHSA-5fjx-chfh-jww8

TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection…

LOW 36

TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01009 Published 2022-08-25 No fix listed CWE-78

TI-2021-20818 CVE-2021-45739 · GHSA-2vw5-8fhm-cvqc

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the…

LOW 35

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2022-02-04 No fix listed

TI-2021-20816 CVE-2021-45737 · GHSA-xxh4-49r4-6rx5

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the…

LOW 35

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2022-02-04 No fix listed

TI-2021-19929 CVE-2021-44246 · GHSA-4555-c4vh-gv67

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R…

LOW 35

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2022-02-04 No fix listed

Open these records in search →