TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

28 records in Ex1800t Firmware · all components

TI-2024-22662 CVE-2024-34257 · GHSA-vvf7-q7rc-3m2m

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType…

HIGH 82

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03817 Published 2024-05-08 No fix listed CWE-285

TI-2025-02085 CVE-2025-2370 · GHSA-4qcq-c33q-9hm3

TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow

HIGH 73

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01165 Published 2025-03-17 No fix listed CWE-119

TI-2025-02084 CVE-2025-2369 · GHSA-f624-74px-f7hv

TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow

HIGH 73

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01165 Published 2025-03-17 No fix listed CWE-119

TI-2025-01835 CVE-2025-2097 · GHSA-7g36-rwff-h8xw

TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07206 Published 2025-03-07 No fix listed CWE-119

TI-2025-01597 CVE-2025-1852 · GHSA-v35v-mpjj-v438

Totolink EX1800T cstecgi.cgi loginAuth buffer overflow

HIGH 73

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00872 Published 2025-03-03 No fix listed CWE-119

TI-2025-01834 CVE-2025-2096 · GHSA-23x6-43x8-rcvc

TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection

MEDIUM 57

A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0278 Published 2025-03-07 No fix listed CWE-77

TI-2025-01833 CVE-2025-2095 · GHSA-r72r-v289-fm3p

TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection

MEDIUM 57

A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0278 Published 2025-03-07 No fix listed CWE-77

TI-2025-01832 CVE-2025-2094 · GHSA-3gjw-gxfc-mqhv

TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection

MEDIUM 57

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.12952 Published 2025-03-07 No fix listed CWE-77

TI-2024-11459 CVE-2024-12352 · GHSA-3m63-4rwc-c6p8

TOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow

MEDIUM 57

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00754 Published 2024-12-09 No fix listed CWE-119

TI-2023-28491 CVE-2023-52026 · GHSA-5vwc-p62x-pm8g

TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command…

MEDIUM 52

TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01643 Published 2024-01-12 No fix listed CWE-78

TI-2023-27896 CVE-2023-51026 · GHSA-27pm-56m3-q426

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 51

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-94

TI-2023-27890 CVE-2023-51020 · GHSA-8cvf-jqfj-79q8

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 51

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27885 CVE-2023-51015 · GHSA-2p37-96m9-9qq9

TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in…

MEDIUM 51

TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-94

TI-2023-27888 CVE-2023-51018 · GHSA-9qq8-mmh8-945v

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 50

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-94

TI-2023-27895 CVE-2023-51025 · GHSA-9v85-6x2c-c4m4

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary…

MEDIUM 45

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-77

TI-2023-27884 CVE-2023-51014 · GHSA-5m24-g5mr-69cj

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 45

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-77

TI-2023-27898 CVE-2023-51028 · GHSA-f8rp-mr62-mh2m

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-78

TI-2023-27897 CVE-2023-51027 · GHSA-rr5r-pr4r-p8ww

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27894 CVE-2023-51024 · GHSA-wgrh-8p66-qrfw

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27893 CVE-2023-51023 · GHSA-2994-j274-2gjp

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27892 CVE-2023-51022 · GHSA-457r-86mp-h5w4

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27891 CVE-2023-51021 · GHSA-3cv7-mfff-4c27

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27889 CVE-2023-51019 · GHSA-vww6-8734-frv4

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27887 CVE-2023-51017 · GHSA-xx2v-j2rm-5c42

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-12-22 No fix listed

TI-2023-27886 CVE-2023-51016 · GHSA-hp25-42wp-6hqm

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command…

MEDIUM 44

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2023-12-22 No fix listed CWE-77

Open these records in search →

Critical	616
High	434
Medium	263
Low	9
No CVSS	0