Vulnerabilities

TI-2026-00871 CVE-2026-1143 · GHSA-m237-23r2-f38w

TOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflow

HIGH 73

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00762 Published 2026-01-19 No fix listed CWE-119

TI-2025-03236 CVE-2025-3675 · GHSA-rj3p-xj8v-g5w3

TOTOLINK A3700R cstecgi.cgi setL2tpServerCfg access control

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00618 Published 2025-04-16 No fix listed CWE-266

TI-2025-03235 CVE-2025-3674 · GHSA-mfp5-c75h-8m74

TOTOLINK A3700R cstecgi.cgi setUrlFilterRules access control

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00592 Published 2025-04-16 No fix listed CWE-266

TI-2025-03231 CVE-2025-3668 · GHSA-v54w-939q-rxq7

TOTOLINK A3700R cstecgi.cgi setScheduleCfg access control

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01381 Published 2025-04-16 No fix listed CWE-266

TI-2025-03230 CVE-2025-3667 · GHSA-jvjw-3ff6-jfjh

TOTOLINK A3700R cstecgi.cgi setUPnPCfg access control

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00637 Published 2025-04-16 No fix listed CWE-266

TI-2025-03229 CVE-2025-3666 · GHSA-pvmj-4jf2-h6jf

TOTOLINK A3700R cstecgi.cgi setDdnsCfg access control

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00637 Published 2025-04-16 No fix listed CWE-266

TI-2025-03228 CVE-2025-3665 · GHSA-j53w-h88v-2v3x

TOTOLINK A3700R cstecgi.cgi setSmartQosCfg access control

HIGH 70

A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00611 Published 2025-04-16 No fix listed CWE-266

TI-2025-03227 CVE-2025-3664 · GHSA-cfp7-5h7h-9vxv

TOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg access control

HIGH 70

A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00611 Published 2025-04-16 No fix listed CWE-266

TI-2025-03226 CVE-2025-3663 · GHSA-c9r8-2f47-ccg6

TOTOLINK A3700R Password cstecgi.cgi setWiFiEasyGuestCfg access control

HIGH 70

A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.11316 Published 2025-04-16 No fix listed CWE-266

TI-2024-28487 CVE-2024-42545 · GHSA-6q4q-jp73-89cq

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid…

HIGH 82

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00663 Published 2024-08-12 No fix listed CWE-120

TI-2024-28486 CVE-2024-42543 · GHSA-82fp-rv69-j7ww

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the…

HIGH 76

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00663 Published 2024-08-12 No fix listed CWE-120

TI-2024-06627 CVE-2024-7160 · GHSA-wrqm-q539-p6f5

TOTOLINK A3700R cstecgi.cgi setWanCfg command injection

MEDIUM 57

A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02999 Published 2024-07-28 No fix listed CWE-77

TI-2024-06623 CVE-2024-7156 · GHSA-4pvc-vf8h-5h32

TOTOLINK A3700R apmib Configuration ExportSettings.sh information disclosure

HIGH 70

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.13339 Published 2024-07-28 No fix listed CWE-200

TI-2024-06621 CVE-2024-7154 · GHSA-9xpj-wgrg-m9r4

TOTOLINK A3700R Password Reset wizard.html access control

MEDIUM 57

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00431 Published 2024-07-28 No fix listed CWE-284

TI-2024-25099 CVE-2024-37640 · GHSA-jq84-946j-r77q

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via…

HIGH 73

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyGuestCfg.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00616 Published 2024-06-14 No fix listed CWE-121

TI-2024-25098 CVE-2024-37639 · GHSA-j78x-grcm-g49w

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via…

HIGH 73

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilterRules.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00614 Published 2024-06-14 No fix listed CWE-121

TI-2024-25097 CVE-2024-37637 · GHSA-vqcc-7gmh-v9jr

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via…

HIGH 82

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2024-06-14 No fix listed CWE-120

TI-2024-25096 CVE-2024-37635 · GHSA-c8xv-94wg-v5h7

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid…

HIGH 82

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00663 Published 2024-06-13 No fix listed CWE-121

TI-2024-25095 CVE-2024-37634 · GHSA-w7h8-wmjg-8jqm

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid…

HIGH 82

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2024-06-13 No fix listed CWE-121

TI-2024-25094 CVE-2024-37633 · GHSA-6vrv-6qrf-5vwc

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid…

HIGH 73

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiGuestCfg

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00615 Published 2024-06-13 No fix listed CWE-121

TI-2024-25093 CVE-2024-37632 · GHSA-hmx2-hcwv-2chg

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the…

HIGH 75

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00643 Published 2024-06-13 No fix listed CWE-121

TI-2024-25092 CVE-2024-37631 · GHSA-q7hf-4g47-96r8

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the…

HIGH 73

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the File parameter in function UploadCustomModule.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00614 Published 2024-06-13 No fix listed CWE-121

TI-2024-15102 CVE-2024-22663 · GHSA-5rh9-65g2-hc9h

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg

HIGH 82

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01741 Published 2024-01-23 No fix listed CWE-77

TI-2024-15101 CVE-2024-22662 · GHSA-25vp-v4qh-h9xj

TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules

HIGH 76

TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00862 Published 2024-01-23 No fix listed CWE-787

TI-2024-15100 CVE-2024-22660 · GHSA-vrx4-754w-fhfx

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg

HIGH 82

TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00862 Published 2024-01-23 No fix listed CWE-787

Vulnerabilities

Filters