TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

22 records in T10 Firmware · all components

TI-2024-07569 CVE-2024-8162 · GHSA-fmc4-v39v-phr8

TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials

HIGH 81

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01666 Published 2024-08-26 No fix listed CWE-798

TI-2025-05548 CVE-2025-6138 · GHSA-jvv4-6597-w46c

TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-16 No fix listed CWE-119

TI-2025-05547 CVE-2025-6137 · GHSA-74cf-vfrg-899q

TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00979 Published 2025-06-16 No fix listed CWE-119

TI-2025-05331 CVE-2025-5905 · GHSA-r36p-hj2v-vj2h

TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12412 Published 2025-06-10 No fix listed CWE-119

TI-2025-05330 CVE-2025-5904 · GHSA-m742-x7cw-3g4q

TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12121 Published 2025-06-10 No fix listed CWE-119

TI-2025-05329 CVE-2025-5903 · GHSA-pwwc-x5p3-pqjj

TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12121 Published 2025-06-09 No fix listed CWE-119

TI-2025-05328 CVE-2025-5902 · GHSA-6mq6-6457-rccm

TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.06541 Published 2025-06-09 No fix listed CWE-119

TI-2025-05327 CVE-2025-5901 · GHSA-jfcx-jqxf-6323

TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.06877 Published 2025-06-09 No fix listed CWE-119

TI-2025-04012 CVE-2025-4496 · GHSA-96qf-wf2v-wxvc

TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01231 Published 2025-05-10 No fix listed CWE-119

TI-2024-07953 CVE-2024-8577 · GHSA-3wrj-w44v-8q9w

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-09-08 No fix listed CWE-120

TI-2024-07952 CVE-2024-8576 · GHSA-vhgg-9xrh-8xg8

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-09-08 No fix listed CWE-120

TI-2024-07949 CVE-2024-8573 · GHSA-wv89-8x46-8266

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01419 Published 2024-09-08 No fix listed CWE-119

TI-2025-08737 CVE-2025-9533 · GHSA-43m2-5vcp-3fpm

TOTOLINK T10 formLoginAuth.htm improper authentication

HIGH 70

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.12213 Published 2025-08-27 No fix listed CWE-287

TI-2024-08359 CVE-2024-9001 · GHSA-4f5p-28mj-x3pv

TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection

MEDIUM 59

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03321 Published 2024-09-19 No fix listed CWE-78

TI-2025-13649 CVE-2025-14964 · GHSA-4jvq-53ch-ccmg

TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow

MEDIUM 50

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01013 Published 2025-12-19 No fix listed CWE-119

TI-2025-28642 CVE-2025-44655 · GHSA-c4ww-38fc-m44w

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is…

MEDIUM 49

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2025-07-21 No fix listed CWE-266

TI-2022-08851 CVE-2022-25132 · GHSA-42rh-j929-h8h4

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology…

MEDIUM 47

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02909 Published 2022-02-18 No fix listed CWE-77

TI-2022-08856 CVE-2022-25137 · GHSA-pmgp-jxgv-gw87

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK…

MEDIUM 46

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08855 CVE-2022-25136 · GHSA-6wc8-j6cc-j854

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology…

MEDIUM 46

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08850 CVE-2022-25131 · GHSA-3f7r-9x8g-xf8x

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK…

MEDIUM 46

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08849 CVE-2022-25130 · GHSA-cvr8-4chv-7pmq

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology…

MEDIUM 46

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2025-05549 CVE-2025-6139 · GHSA-596f-hgfj-9vg7

TOTOLINK T10 shadow.sample hard-coded password

MEDIUM 44

A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0LOW 2.0 Adjacent network High privileges No interaction EPSS 0.00404 Published 2025-06-16 No fix listed CWE-255

Open these records in search →