TI-2025-41158 CVE-2025-67188 · GHSA-wv35-4hfx-h763
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112.
Priority HIGH 82
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112.
TOTOLINK
Records1322All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical616CVSS 9.0–10.0
CVSS high434CVSS 7.0–8.9
Exploited now
TOTOLINK records in CISA KEVNo TOTOLINK vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
33 records in A950rg Firmware · all components
TI-2025-41156 CVE-2025-67186 · GHSA-xf8g-xrmp-prrv
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the…
Priority HIGH 82
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so.
TI-2025-28852 CVE-2025-45798 · GHSA-p797-f93r-qxjf
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112.
Priority HIGH 82
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112.
TI-2025-20693 CVE-2025-28037 · GHSA-x7cp-g8mq-6p3p
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to…
Priority HIGH 82
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter.
TI-2025-20692 CVE-2025-28036 · GHSA-cm5r-mjj2-pxp4
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command…
Priority HIGH 82
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
TI-2025-20691 CVE-2025-28035 · GHSA-fg9r-f95c-6rgw
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command…
Priority HIGH 82
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.
TI-2025-20690 CVE-2025-28034 · GHSA-p2gm-m8q4-6r5q
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…
Priority HIGH 82
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
TI-2025-41157 CVE-2025-67187 · GHSA-83jp-7r6c-8wcg
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG…
Priority HIGH 76
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112.
TI-2025-28851 CVE-2025-45797 · GHSA-g4cf-3pjw-w4xj
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability.
Priority HIGH 75
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability.
TI-2025-04012 CVE-2025-4496 · GHSA-96qf-wf2v-wxvc
TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
Priority HIGH 73
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927.
TI-2025-20689 CVE-2025-28033 · GHSA-mp63-mm73-jhgm
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…
Priority HIGH 71
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
TI-2025-20688 CVE-2025-28032 · GHSA-q8pq-pv68-q9cm
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R…
Priority HIGH 71
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth bu…
TI-2025-20685 CVE-2025-28029 · GHSA-286f-m35x-h7r5
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
Priority HIGH 71
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi
TI-2025-20683 CVE-2025-28027 · GHSA-2m4j-5h27-9q77
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
Priority HIGH 71
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
TI-2025-20682 CVE-2025-28026 · GHSA-gg8q-wm6m-x7w3
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
Priority HIGH 71
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.
TI-2025-37775 CVE-2025-60702 · GHSA-chxj-6g8r-wh5q
A command injection vulnerability exists in the TOTOLINK A950RG Router firmware…
Priority HIGH 70
A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary.
TI-2025-20684 CVE-2025-28028 · GHSA-x4wh-mww5-5258
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
Priority HIGH 65
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through t…
TI-2025-20681 CVE-2025-28025 · GHSA-99gc-w2rj-vq34
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
Priority HIGH 65
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through t…
TI-2025-37772 CVE-2025-60699 · GHSA-g776-ww5q-qfqq
A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware…
Priority MEDIUM 64
A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary.
TI-2025-41159 CVE-2025-67189 · GHSA-27qh-whg4-7h58
A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK…
Priority MEDIUM 62
A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112.
TI-2022-08831 CVE-2022-25082 · GHSA-v4mx-vj69-j98g
TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to…
Priority MEDIUM 57
TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function.
TI-2025-28853 CVE-2025-45800 · GHSA-56gh-5cpc-w3cc
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the…
Priority MEDIUM 51
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.
TI-2022-09634 CVE-2022-26210 · GHSA-c3h9-pm7m-68qp
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…
Priority MEDIUM 51
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…
TI-2025-28642 CVE-2025-44655 · GHSA-c4ww-38fc-m44w
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is…
Priority MEDIUM 49
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.
TI-2022-09638 CVE-2022-26214 · GHSA-mjw3-486f-p3cf
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG…
Priority MEDIUM 47
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to conta…