Vulnerabilities

Filters

Reset all

2 selected

35 records

Sort

Vendor: TOTOLINK Component: A7000r Firmware Clear all filters

TI-2026-01309 CVE-2026-1623 · GHSA-rjqr-3rwj-fv3p

Totolink A7000R cstecgi.cgi setUpgradeFW command injection

MEDIUM 57

A weakness has been identified in Totolink A7000R 4.1cu.4154.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02388 Published 2026-01-29 No fix listed CWE-74

TI-2026-01288 CVE-2026-1601 · GHSA-wpgv-345q-6vm7

Totolink A7000R cstecgi.cgi setUploadUserData command injection

MEDIUM 57

A weakness has been identified in Totolink A7000R 4.1cu.4154.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02171 Published 2026-01-29 No fix listed CWE-74

TI-2026-01237 CVE-2026-1548 · GHSA-f752-h5rp-h694

Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection

MEDIUM 57

A flaw has been found in Totolink A7000R 4.1cu.4154.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03436 Published 2026-01-28 No fix listed CWE-74

TI-2026-01236 CVE-2026-1547 · GHSA-26qr-hrpr-gcj8

Totolink A7000R cstecgi.cgi setUnloadUserData command injection

MEDIUM 57

A vulnerability was detected in Totolink A7000R 4.1cu.4154.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03033 Published 2026-01-28 No fix listed CWE-74

TI-2025-39237 CVE-2025-63154 · GHSA-xc34-cfv4-4f42

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the…

HIGH 66

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2025-11-10 No fix listed CWE-121

TI-2025-39236 CVE-2025-63153 · GHSA-vq5g-x7h6-qppv

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the…

HIGH 66

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2025-11-10 No fix listed CWE-121

TI-2025-39335 CVE-2025-63462 · GHSA-rw7q-hr3r-j4gq

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the…

HIGH 72

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39334 CVE-2025-63461 · GHSA-h69g-qfwq-m8hr

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the…

HIGH 72

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39333 CVE-2025-63460 · GHSA-q3f3-7cv5-44xh

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the…

HIGH 72

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39332 CVE-2025-63459 · GHSA-pxjv-7jrp-fcxj

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the…

HIGH 72

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-32330 CVE-2025-51452 · GHSA-qwvg-f3gp-j7f2

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by…

MEDIUM 49

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00411 Published 2025-08-13 No fix listed CWE-288

TI-2024-06678 CVE-2024-7213 · GHSA-m3gj-m97q-954q

TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK A7000R 9.1.0u.6268_B20220504.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0109 Published 2024-07-30 No fix listed CWE-120

TI-2024-06677 CVE-2024-7212 · GHSA-6ffh-c35q-fwcj

TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in TOTOLINK A7000R 9.1.0u.6268_B20220504.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01019 Published 2024-07-30 No fix listed CWE-120

TI-2024-18933 CVE-2024-28640 · GHSA-5wqx-3cwh-cgg8

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R…

MEDIUM 54

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service (D0S) via the command field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.14182 Published 2024-03-16 No fix listed CWE-125

TI-2024-18932 CVE-2024-28639 · GHSA-985v-7jg3-m7g3

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R…

HIGH 82

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2024-03-16 No fix listed CWE-120

TI-2023-26995 CVE-2023-49418 · GHSA-8p3f-gfjg-w8c4

TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.

MEDIUM 44

TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00868 Published 2023-12-11 No fix listed CWE-787

TI-2023-26994 CVE-2023-49417 · GHSA-99mm-ph4x-m5vp

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

HIGH 81

TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00868 Published 2023-12-11 No fix listed CWE-787

TI-2023-24676 CVE-2023-45985 · GHSA-5cgm-4jc2-42h7

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were…

LOW 35

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00907 Published 2023-10-16 No fix listed CWE-787

TI-2023-24675 CVE-2023-45984 · GHSA-7xp8-vhxc-29v9

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was…

MEDIUM 44

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2023-10-16 No fix listed CWE-121

TI-2023-18720 CVE-2023-36950 · GHSA-m3gg-5v93-qrhg

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was…

MEDIUM 45

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2023-10-16 No fix listed CWE-121

TI-2023-18719 CVE-2023-36947 · GHSA-xf6j-84wr-6vq4

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was…

MEDIUM 45

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2023-10-16 No fix listed CWE-121

TI-2022-14502 CVE-2022-32993 · GHSA-j937-h7hx-83cg

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

MEDIUM 44

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00958 Published 2022-08-29 No fix listed

TI-2022-17275 CVE-2022-37084 · GHSA-qf8v-9ggf-h3h2

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the…

LOW 34

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00342 Published 2022-08-25 No fix listed CWE-787

TI-2022-17274 CVE-2022-37083 · GHSA-gg99-vf6h-x68r

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection…

LOW 36

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01009 Published 2022-08-25 No fix listed CWE-78

TI-2022-17273 CVE-2022-37082 · GHSA-x94j-5jm6-c7r7

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection…

LOW 36

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the function NTPSyncWithHost.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01009 Published 2022-08-25 No fix listed CWE-78