TOTOLINK vulnerabilities

TI-2025-20729 CVE-2025-28138 · GHSA-gmm6-5vw5-42h2

The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote…

HIGH 82

The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01148 Published 2025-03-27 No fix listed CWE-78

TI-2025-20692 CVE-2025-28036 · GHSA-cm5r-mjj2-pxp4

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command…

HIGH 82

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01365 Published 2025-04-22 No fix listed CWE-78

TI-2025-20691 CVE-2025-28035 · GHSA-fg9r-f95c-6rgw

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command…

HIGH 82

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01365 Published 2025-04-22 No fix listed CWE-78

TI-2025-20690 CVE-2025-28034 · GHSA-p2gm-m8q4-6r5q

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

HIGH 82

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01365 Published 2025-04-22 No fix listed CWE-78

TI-2025-04012 CVE-2025-4496 · GHSA-96qf-wf2v-wxvc

TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01231 Published 2025-05-10 No fix listed CWE-119

TI-2025-20689 CVE-2025-28033 · GHSA-mp63-mm73-jhgm

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

HIGH 71

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.004 Published 2025-04-22 No fix listed CWE-121

TI-2025-20688 CVE-2025-28032 · GHSA-q8pq-pv68-q9cm

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

HIGH 71

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth bu…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00345 Published 2025-04-22 No fix listed CWE-121

TI-2025-20677 CVE-2025-28020 · GHSA-2cpg-xxmj-g6gp

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

HIGH 65

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.004 Published 2025-04-23 No fix listed CWE-120

TI-2025-20676 CVE-2025-28019 · GHSA-jgrp-8284-4crq

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

HIGH 65

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00493 Published 2025-04-23 No fix listed CWE-120

TI-2025-20675 CVE-2025-28018 · GHSA-35q6-wq6r-22f5

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

HIGH 65

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00425 Published 2025-04-23 No fix listed CWE-120

TI-2025-20674 CVE-2025-28017 · GHSA-9cm6-6m3f-x97h

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in…

MEDIUM 62

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01178 Published 2025-04-23 No fix listed CWE-77

TI-2022-09634 CVE-2022-26210 · GHSA-c3h9-pm7m-68qp

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 51

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05693 Published 2022-03-15 No fix listed CWE-78

TI-2022-09638 CVE-2022-26214 · GHSA-mjw3-486f-p3cf

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 47

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02779 Published 2022-03-15 No fix listed CWE-78

TI-2022-09636 CVE-2022-26212 · GHSA-7cpm-mx36-wp4r

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 47

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02779 Published 2022-03-15 No fix listed CWE-78

TI-2022-09635 CVE-2022-26211 · GHSA-27q3-cvqp-pf2m

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 47

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02779 Published 2022-03-15 No fix listed CWE-78

TI-2022-09632 CVE-2022-26208 · GHSA-jx24-x4rm-7jjh

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 47

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02779 Published 2022-03-15 No fix listed CWE-78

TI-2022-08825 CVE-2022-25076 · GHSA-3hmg-j35p-w2ww

TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection…

MEDIUM 47

TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02771 Published 2022-02-22 No fix listed CWE-78

TI-2022-09633 CVE-2022-26209 · GHSA-2563-r73r-7cq9

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 46

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02218 Published 2022-03-15 No fix listed CWE-78

TI-2022-09631 CVE-2022-26207 · GHSA-jh3q-ph4x-rfpj

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 46

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02218 Published 2022-03-15 No fix listed CWE-78

TI-2022-09630 CVE-2022-26206 · GHSA-4q8q-j6r5-h89x

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

MEDIUM 46

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02218 Published 2022-03-15 No fix listed CWE-78

TI-2022-11538 CVE-2022-28935 · GHSA-6hhx-vm7m-j47c

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink…

LOW 38

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03299 Published 2022-07-06 No fix listed CWE-77

TI-2022-16910 CVE-2022-36611 · GHSA-7f7j-96j7-54vv

TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

LOW 34

TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00296 Published 2022-08-28 No fix listed CWE-798

TI-2025-20727 CVE-2025-28136 · GHSA-qc9g-vf45-fwfp

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.

LOW 29

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00315 Published 2025-04-15 No fix listed CWE-121

Critical	616
High	434
Medium	263
Low	9
No CVSS	0

TOTOLINK

Exploited now

Components

Records

The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote…

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command…

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command…

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow…

TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink…

TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.